023.md

Jolly Mauve Parakeet

High

User will not be able to withdraw their assets from the vault if their share drops below minDeposit

Summary

There is a check that redeeming shares should not be less than minDeposit in assets amount. This means that their assets will be taken by protocol.

Root Cause

        if (!redeemShares.isZero() && context.latestCheckpoint.toAssets(redeemShares).lt(context.parameter.minDeposit))
            revert VaultInsufficientMinimumError();

perennial-vault/contracts/Vault.sol#L303

Internal pre-conditions

User's share amount drop below minDeposit in assets values

External pre-conditions

No response

Attack Path

No response

Impact

Users cannot withdraw their assets once their share falls below minDeposit. This means that their assets will be taken by protocol. The impact depends on minDeposit values sets by protocol, maybe its 0$, 10$, 100$

PoC

No response

Mitigation

Allow withdrawal if it's all their assets left.