Submitted by doublespending, also found by imare
Balance check during MagicSpend validation cannot ensure that MagicSpend has enough balance to cover the requested fund.
Use a state instead of address(this).balance to record the remaining balance.
raymondfam (lookout) commented:
wilsoncusack (Coinbase) confirmed and commented:
3docSec (judge) commented:
wilsoncusack (Coinbase) commented:
Coinbase mitigated:
Status: Mitigation confirmed. Full details in reports from imare and McToady.
