mediumLogic errorEVM-Solidity
Plaza Finance: The state variable `BondToken.globalPool` is updated incorrectly via `Pool.startAuction()`
- Payout
- $0
- Protocol
- Plaza Finance
- Disclosed
- Jan 23, 2025
- Source
- sherlock
Plaza Finance's BondToken records historical per-period share values that are read back to compute the coupon tokens bondholders can claim. In increaseIndexedAssetPeriod(), called from Pool.startAuction(), the contract pushes the previously stored globalPool.s …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.