Description
LoopStrategy::onMoreFlashLoan() does not validate that the caller is the market, which allows attackers to steal collateral by calling it directly.
Recommendation
Revert if the caller is not markets.
Status
Addressed in #7d71809.
Description
LoopStrategy::onMoreFlashLoan() does not validate that the caller is the market, which allows attackers to steal collateral by calling it directly.
Recommendation
Revert if the caller is not markets.
Status
Addressed in #7d71809.