Balancer Readonly Reentrancy

October 19, 2023 ยท View on GitHub

Configuration

  • Check: pess-balancer-readonly-reentrancy
  • Severity: High
  • Confidence: Medium

Description

Highlights the use of Balancer getter functions getRate and getPoolTokens (which are not checked for readonly reentrancy via VaultReentrancyLib.ensureNotInVaultContext or IVault.manageUserBalance), which return values that theoretically could be manipulated during the execution.

Vulnerable Scenario

test scenarios

Recommendation