highFlash loan attackEVM-Solidity
Plaza Finance: Malicious user can leverage flash loans to claim all coupon rewards
- Payout
- $0
- Protocol
- Plaza Finance
- Disclosed
- Jan 23, 2025
- Source
- sherlock
Plaza Finance lets any caller advance a bond-token distribution period by calling Pool::startAuction once the distributionPeriod has elapsed, which snapshots each holder's current sharesPerToken into BondToken. Because Distributor::claim redeems 1 indexed shar …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.