Submitted by WatchPug
https://github.com/code-423n4/2021-12-mellow/blob/6679e2dd118b33481ee81ad013ece4ea723327b5/mellow-vaults/test_brownie/contracts/YearnVault.sol#L84-L101
The actual token withdrew from yToken.withdraw() will most certainly be less than the tokenAmounts[i], due to precision loss in the calculation of yTokenAmount.
As a result, IERC20(_vaultTokens[i]).safeTransfer(to, actualTokenAmounts[i]); in LpIssuer.sol#withdraw() will revert due to insufficant balance.
Change to:
MihanixA (Mellow Protocol) confirmed and disagreed with severity:
0xleastwood (judge) commented:
Oxn1ck (Mellow Protocol) commented:
0xleastwood (judge) commented:
Oxn1ck (Mellow Protocol) commented:
