From 74fb071a54157485ee9dbf247f823c0faa9a1393 Mon Sep 17 00:00:00 2001 From: omahs <73983677+omahs@users.noreply.github.com> Date: Sun, 8 Dec 2024 07:50:27 +0100 Subject: [PATCH] fix typos --- .../attack_reviews/top_immunefi_vulnerabilities/enzyme.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/advanced_expert/attack_reviews/top_immunefi_vulnerabilities/enzyme.md b/advanced_expert/attack_reviews/top_immunefi_vulnerabilities/enzyme.md index 761c45c..eccac60 100644 --- a/advanced_expert/attack_reviews/top_immunefi_vulnerabilities/enzyme.md +++ b/advanced_expert/attack_reviews/top_immunefi_vulnerabilities/enzyme.md @@ -6,7 +6,7 @@
-* Using a flashloan from `IdleTokenGovernance.sol` affected the `totalSupply` fo the Idle tokens, which was used to calculate the price of the token. +* Using a flashloan from `IdleTokenGovernance.sol` affected the `totalSupply` of the Idle tokens, which was used to calculate the price of the token. * Price calculations were based on the `totalNav / totalSupply` of the tokens. * It's worth noting the initial Idle Token integration was with v4, which did not have any flashloan logic. That was later added in v5, thus unintentionally introducing a bug into Enzyme's Finance protocol. @@ -50,7 +50,7 @@ ### PoC 1. Fund malicious contract with WETH to be able to swap it later for USDC to pay for a flashloan. -2. Make a flashloan of IdleUSCDYield tokens. This will in fact, affect GAV calculations. +2. Make a flashloan of IdleUSDCYield tokens. This will in fact, affect GAV calculations. 3. During a flashloan, call `buyShares`. As GAV calculations are affected, we are buying shares at a discount now. 4. Repay flashloan. 5. Call `redeemShares` to sell all the bought shares of Idle fund for a profit.