mediumLogic errorEVM-Solidity
Zap Protocol: Vesting contract cannot work with ETH, although it's supposed to.
- Payout
- $0
- Protocol
- Zap Protocol
- Disclosed
- Mar 20, 2024
- Source
- sherlock
Zap Protocol's Vesting contract advertises native-token (ETH/BNB) claim support via setting `token` to address(1), but the admin-facing `updateUserDeposit` function unconditionally calls `token.safeTransferFrom(distributionWallet, address(this), amount)`. Beca …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.