Tribe Turbo contest - 0xliumin's results

Lines of code

https://github.com/Rari-Capital/solmate/blob/main/src/mixins/ERC4626.sol#L67

Vulnerability details

Impact

If the number of assets is different from the number of shares, the user will get more or less shares than they expect.

Users don't have to be sophisticated at all, just using the contract as intended can cause users to get more or less of the shares of a vault.

Proof of Concept

Here's a proof of concept:

1. Alice deposits 1e18 tokens into ERC4626 vault.
2. Bob deposits 1e18 tokens into ERC4626 vault.
3. The amount of tokens in the vault doubles (maybe due to yield), so there are 4e18 tokens in the vault
4. Alice calls mint with 1e18 shares.

We would expect the following: a. Alice now has 2/3rds of the shares (2e18) b. Alice has to transfer 2e18 tokens

Alice correctly has to transfer 2e18 tokens. But she receives 2e18 shares instead of 1e18 shares because of the line of code here. https://github.com/Rari-Capital/solmate/blob/main/src/mixins/ERC4626.sol#L67

Recommended Mitigation Steps

Change amount to shares on that line. Also should check other implementations to ensure this isn't exploitable in any production contracts.