hard20 pts · first answer countssmart-contract-securitydefiaccess-control

A flash loan callback anyone can trigger

A contract implements onFlashLoan(initiator, token, amount, fee, data) and performs swaps based on data. It checks msg.sender is the lender but ignores initiator. What can an attacker do?

A.Nothing, since the lender address is checked in the callbackB.Only borrow from the lender directly, with no effect on youC.Change the lender's fee for every other borrower using itD.Start a loan to your contract, so the callback runs their data

Discussion 0

Join free to post in the discussion.

A flash loan callback anyone can trigger

Discussion 0

Related questions