Skip to content
Request an audit

‹ Findings database

The DaiJoin contract may be caged which will DoS withdrawals forever

Low/InfoMaple Cash Strategies audit·Three Sigma·Institutional lending·26th November, 20243S-Maple-N10

Description

The daiJoin contract may be caged, which means exit() is DoSed forever.

This is called in the psmWrapper buyGem(), legacyDaiJoin.exit(address(this), usdsInWad);, so it would be forever DoSed as there is no way to 'uncage'.

Recommendation

It's possible to set a new Psm in the Sky strategy but it is something to keep in mind.

Status

Acknowledged

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests