🚨SlowMist TI Alert🚨 💸 GaslessReservoirEnabler Loss: ~$23k 🔍 Root Cause: GaslessReservoirEnabler’s erc20WithTransfersAndExecute → _executeInternal checked module addresses but did not bind ERC20 transferFrom instructions to an authorized asset owner, allowing arbitrary
The GaslessReservoirEnabler protocol experienced a loss of approximately $23,000 due to a vulnerability in its _executeInternal function. The flaw allowed for arbitrary ERC20 transferFrom instructions to be executed without proper authorization.