From 99b200bad93bcee0d0c9441d0393b2aa48636017 Mon Sep 17 00:00:00 2001
From: Daniel Wang <99078276+dantaik@users.noreply.github.com>
Date: Thu, 12 Oct 2023 13:46:09 +0800
Subject: [PATCH] fix(protocol): fix a bug reported by Quillaudit (#14938)

---
 packages/protocol/contracts/tokenvault/ERC20Vault.sol | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/protocol/contracts/tokenvault/ERC20Vault.sol b/packages/protocol/contracts/tokenvault/ERC20Vault.sol
index 45b1eb84f21..e37f8747c97 100644
--- a/packages/protocol/contracts/tokenvault/ERC20Vault.sol
+++ b/packages/protocol/contracts/tokenvault/ERC20Vault.sol
@@ -144,7 +144,7 @@ contract ERC20Vault is
         IBridge.Message memory message;
 
         (message.data, _amount) = _encodeDestinationCall({
-            user: message.user,
+            user: msg.sender,
             token: opt.token,
             amount: opt.amount,
             to: opt.to