Spectra — disclosed vulnerability reports and payouts
Every publicly disclosed and closed bug bounty report we hold for Spectra, with our own summary of each finding and a link to the original disclosure.
- Reports indexed
- 2
- Total paid
- $0
- Critical
- 0
- Largest payout
- $0
This page collects the 2 closed, publicly disclosed Spectra reports indexed on Coin Buggie. Nothing here is active or unpatched — every entry was published by the programme or the researcher after remediation.
The findings concentrate in Logic error, Flash loan attack, across EVM-Solidity. Reading a single protocol end to end is the fastest way to see which assumptions its codebase repeatedly gets wrong, which is usually a better predictor of where the next finding lives than the category alone.
Use the vulnerability class links below to compare these findings against the same bug class in other protocols.
What reviewers look for
- Logic error findings disclosed against Spectra
- Flash loan attack findings disclosed against Spectra
Curated highlights
The largest disclosed payouts in this group, with our own summary of each. Every report links back to the original disclosure.
Spectra: PrincipalToken is not ERC-5095 compliant
The Spectra PrincipalToken contract was found to be non-compliant with the ERC-5095 standard, which prevents seamless integration with other DeFi protocols. Specifically, the contract failed to support delegated withdrawals and redemptions via EIP-20 allowances, and the status-reporting functions maxWithdraw and maxRedeem provided incorrect return values or reverts when the contract was paused. These issues risked damaging the protocol's interoperability and necessitated code updates to meet industry-standard requirements.
Spectra: All yield generated in the IBT vault can be drained by performing a vault deflation attack using the flash loan functionality of the Principal Token contract
The PrincipalToken contract in the Spectra protocol is vulnerable to a vault deflation attack via its flash loan functionality. Because the protocol can hold a large percentage of an underlying IBT (ERC4626) vault's supply, an attacker can use a flash loan to drain the vault and temporarily reset its share price to a default value. This manipulation allows the attacker to redeem existing assets at a highly favorable rate, effectively stealing the accumulated yield of other vault users.