Submitted by WatchPug
Per the document:
However, in the current implementation, Synth tokens are minted based on the calculation result. While nativeDeposit be added to the reserve, reserveForeign will remain unchanged, not deducted nor locked.
Making it possible for Synth tokens to get over-minted.
The 0.25 BTC vSynth held by Bob is now backed by nothing and unable to be redeemed.
This also makes it possible for a sophisticated attacker to steal funds from the Vader pool.
The attacker may do the following in one transaction:
SamSteinGG (Vader) confirmed
