Ondo Finance - MaslarovK's results

Lines of code

https://github.com/code-423n4/2024-03-ondo-finance/blob/main/contracts/ousg/ousgInstantManager.sol#L254-L276

Vulnerability details

Impact

When minting rOUSG, there is no way for the user to set a preferred minimum amount(i.e slippage protection).

  function mintRebasingOUSG(
    uint256 usdcAmountIn
  )
    external
    override
    nonReentrant
    whenMintNotPaused
    returns (uint256 rousgAmountOut)
  {
    uint256 ousgAmountOut = _mint(usdcAmountIn, address(this));
    ousg.approve(address(rousg), ousgAmountOut);
    rousg.wrap(ousgAmountOut);
    rousgAmountOut = rousg.getROUSGByShares(
      ousgAmountOut * OUSG_TO_ROUSG_SHARES_MULTIPLIER
    );
    rousg.transfer(msg.sender, rousgAmountOut);
    emit InstantMintRebasingOUSG(
      msg.sender,
      usdcAmountIn,
      ousgAmountOut,
      rousgAmountOut
    );
  }

Proof of Concept

This may be a problem as the price may vary, which will result in different number of shares minted to the user than intended.

Tools Used

Manual Review

Recommended Mitigation Steps

Implement slippage protection set by the user upon calling the function.

Assessed type

Oracle