Skip to content

Topic

Vault inflation attacks

Attacks on share-based vaults in which a tiny first deposit followed by a direct token transfer distorts the exchange rate, so later depositors receive too few shares or none at all.

Current clusters

build1 publisher

The decimals offset decided whether the victim lost 50 tokens or 4.98

A Foundry fixture runs the same donation attack against two OpenZeppelin vaults, and the depositor ends with zero shares in one and shares worth 45.02 of 50 tokens in the other. In the zero-offset run the attacker burned about 4,975 tokens to cause it.

Publishers:dev.to

Reality

Evidence66
Adoption
Insufficient
Hype gap−20
Incentives24
Confidence58