# DoS attack if assets are transferred before a fundLoan() call. Medium · Three Sigma · Institutional lending · 10th April, 2024 Finding 3S-MAPLE-M06 of the Maple Finance security review. - Protocol: https://maple.finance/ - Report: /reports/maple-finance-iii-2024 - Source: https://cdn.sanity.io/files/qoqld077/production/36dbe5ca76da3d2392bcee581548067705b8bd36.pdf --- ### Description In fixed term loans, a DoS attack is possible if assets are transferred into the MapleLoan before the loan is funded. Exploit scenario ● delegate funds loan ● attacker frontruns delegate and transfers fundsAsset to the MapleLoan ● funding reverts due to the require that the unaccounted funds are 0 ### Recommendation Skim before funding. ### Status Addressed in the following PR: https://github.com/maple-labs/fixed-term-loan-manager-private/pull/34 --- Related findings: - [All assets of (m)TapiocaOFT can be stealed by depositing to strategy cross chain call with 1 amount but maximum shares possible](https://0xsimao.com/findings/tapioca-dao-tapioca-stealed-maximum-shares): Tapioca DAO