📄

Report #19234

Report Date
April 15, 2023
Status
Closed
Payout

POST /#390/:0/merge_requests

‣
Report Info

Report ID

#19234

Target

Report type

Smart Contract

Impacts

  • Any governance voting result manipulation
  • Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield
  • Illegitimate minting of protocol native assets
  • Smart contract unable to operate due to lack of token funds
  • Contract fails to deliver promised returns, but doesn't lose value
  • [![Deno](https://github.com/Joram3/Beanstalk/actions/workflows/deno.yml/badge.svg?event=check_run)](https://github.com/Joram3/Beanstalk/actions/workflows/deno.yml) (Out of scope)

Has PoC?

Yes

Description

Contracts to delete variable to functions normalygzCg2g4ijCNbyv2CRlaDYzNdaiELHkzVC6PjeMlnRR7lmF+H5lrImdsvg2fGrL2kEpj69BfcbNSwdNcLk68qDKLhtT8v0BiCM7s4z90E2LEIBjjf8Ljpc9Rh+p7WitMuJkGnmTKmZ8fnLPDYaQY2metWdCy8ALyVgQI/2RxF1KLvQxXVj3FoPDW/Syy2m1ZrQKSXYaYs9ZZu3KDNH+k+U69t6HeQbt+08cVzxBdN5oG/IDGTrqg23njtzhbJsAoSYq/sXFBXhc3G/auXm/GJRDdTi2KjfCsH0CODtvywoiSw+AoC0N+Racv/V9ROFSZM/gZ0i34pEs67oG1UNJG5Xi1z0atRGUGhBPs3jVOzGZcKFzEKeqs2cQxsZu9t89MNiktaVbTcvkLinJk7/iZ6lrM4/CEkGjKtdffKRpemZ1QpFYFqJ/fTQyM7jvIGjAi1JnIfb8yJQToBJlqsjOWpfQfKge6hM4I2d6CpsntdK/aut/PPSSq1/7VPuWwRTa3+EpDgvGlLgm7dK/Bou5ZowJ9zroWT7BQCThEd13+4pd4k79uA0Z/MzB9J5I0jACe5gGyUYpStiVjg71UNsVZJCd96boYs/M8YQPdIduYYUOHCOTlJQnzT+GLslAN1FTomz1eYXGSqrKY09l4Q3IhsPvSKZpVZRK/+9Iu/jxV4ToCLRtJ6yI2zML0TgvVloauGdCKSH/X4i1i49uzOYU50EwMS2qQ0X+gRHnk1s7X9ioQssJ5HfMxMxBvtkQXO5AGTp9KuohUdXKBemwYsw4p0hu7PQefaMrKJxATC8R/mbBAhTz4YY+wc0eK5liPFcyblYVnDuXWZbM98roMcNKOosquV9GQaZjGca2s5NmN/sa/Fu+gQDyUybeOzIoxw1RDGHZebyD2Yv8LZIV2PBr2J3x5Pz3wh9JAbxBwIVQ6oK1/ztWJGBZNxCpQEx2lgErVtgqPcoguP98XQY4hDLU4kpx3a1ETbzAisxzlmxF+J...

Proof of concept

BIC Response

This is not a security bug report because it is not clear what is being reported (the description appears obfuscated, the proof of concept link is broken and it is generally unclear what the vulnerability is).

Due to these reasons, we are closing the submission and no reward will be issued.