<!-- canonical: https://0xsimao.com/findings/more-markets-loop-tracks-balance-redeemable -->

# LoopStrategy::totalAssets() tracks the wFlow balance, but this is not redeemable

Low/Info · Three Sigma · Lending · 2nd December 2024

Finding 3S-MORE-L02 of the MORE Optimizer security review.

- Protocol: https://www.more.markets/
- Report: /reports/more-optimizer
- Source: https://github.com/0xsimao/audits/blob/main/Three%20Sigma/2024-12-02-more-markets.pdf

---

### Description

The LoopStrategy is not supposed to hold wFlow directly, but this is still tracked in
totalAssets(). However, this is not redeemed in _withdraw(), so it will be stuck.

### Recommendation

Consider withdrawing wFlow on _withdraw() or remove the balance from the
totalAssets() calculation.

### Status

Addressed in [#bc94096](https://github.com/MoreLabsXYZ/MORE-Optimizers/commit/bc940965c7400433d71e6c7f71f2ebdf9d787100).

Disclosed by 0xSimao (https://0xsimao.com/).

---

Related findings:

- [Cds depositors profit up to the strike price is not redeemable as the total cds deposited amount is not increased](https://0xsimao.com/findings/autonomint-strike-price-redeemable-increased): Autonomint
- [Destination Vault rewards are not added to idleIncrease when info.totalAssetsPulled > info.totalAssetsToPull](https://0xsimao.com/findings/tokemak-rewards-info-pulled-pull): Tokemak
- [Inconsistent updateTotalAssets modifier usage](https://0xsimao.com/findings/yieldoor-ii-inconsistent-assets-modifier-usage): Yieldoor LoopedVault
- [RebalanceLogic::rebalanceCallback() doesn't update lastTotalAssets when rebalancing from morpho to morpho](https://0xsimao.com/findings/yieldoor-ii-rebalance-callback-rebalancing-morpho): Yieldoor LoopedVault
