Skip to content

project

OpenZeppelin

Widely used library of audited Solidity contract implementations, including an ERC-4626 vault base that uses virtual assets and shares and a configurable decimals offset.

Known aliases

  • OpenZeppelin Contracts

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 publisher

The decimals offset decided whether the victim lost 50 tokens or 4.98

A Foundry fixture runs the same donation attack against two OpenZeppelin vaults, and the depositor ends with zero shares in one and shares worth 45.02 of 50 tokens in the other. In the zero-offset run the attacker burned about 4,975 tokens to cause it.

Publishers:dev.to

Reality

Evidence66
Adoption
Insufficient
Hype gap−20
Incentives24
Confidence58