Submitted by hickuphh3
Let us assume either of the following cases:
Attempted withdrawals can be frontrun such that users will receive less, or even no funds in exchange for burning vault tokens. This is primarily enabled by the feature of having deposits in multiple stablecoins.
Hence, Mallory is able to steal Alices funds by frontrunning her withdrawal transaction.
The withdrawal amount could be checked against getPricePerFullShare(), perhaps with reasonable slippage.
GainsGoblin (yAxis) commented:
GalloDaSballo (judge) commented:
GainsGoblin (yAxis) commented:
BobbyYaxis (yAxis) noted:
