M-03 Fix [PAG]

[junkim012]

• Merges into C-01 Fix [PAG] #95
• With the virtual assets and virtual shares in the OZ ERC4626, It is still provably unprofitable for the attacker to grief a user deposit. The attacker will lose more money than they gain. But before this change, it was still possible for the attacker to cause the user to lose funds for some cost paid by the attacker.
  • To further defend against inflation attacks, the factory now enforces the deployer to make an initial deposit of minimum 1e3, and burns 1e3 of the minted shares by locking it in the factory contract.

Changes

• The Vault constructor now calls _addSupportedMarkets to allow for initial deposit from the factory.
• Public functions such as addSupportedMarkets is separated into external and internal markets.
• The factory transfers from the user and deposits into the vault.

[openzeppelin-code]

M-03 Fix [PAG]

Generated at commit: ca87088070b794d37678753c52cef4492c377e76

🚨 Report Summary

	Severity Level	Results
Contracts	Critical High Medium Low Note Total	2 2 0 12 39 55
Dependencies	Critical High Medium Low Note Total	0 0 0 0 0 0

---

For more details view the full report in OpenZeppelin Code Inspector