| Reported on Immunefi | Nov-22-2022 |
| Mitigation | Nov-22-2022 |
| Solution Completed | Nov-22-2022 |
The contract wMANA 0xd055617d7bf6b5c0e743ca0ba469591477efdf5e has the function forward that allow you to do calls to contracts that is not depositedToken, for doing the call this uses a call script who the wmana call using a DelegateCall so maintains the context of the wMANA. Also we need to hold 1 wMANA but we can do a deposit() to get it.
The attacker can call 0x469788fE6E9E9681C6ebF3bF78e7Fd26Fc015446 (Snapshot: Delegation) and delegate all the MANA hold by the wMANA contract to do voting on the DAO (currently 30,218,494.937222222 MANA).
Smart Contracts - Low
We have removed the forward function Tfrom the wMANA contract.