mediumInteger overflow/underflowEVM-Solidity
PoolTogether: `maxDeposit()` uses `yieldVault.maxDeposit()` but `_depositAndMint()` uses `yieldVault.mint()`
- Payout
- $0
- Protocol
- PoolTogether
- Disclosed
- Apr 4, 2024
- Source
- code4rena
The PoolTogether PrizeVault contract exhibited an inconsistency between its ERC-4626 reported deposit limit and the actual execution logic. Specifically, the contract's maxDeposit() function relied on the underlying yield vault's deposit limit, but the vault a …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-03-pooltogether-findings/issues/335
- https://github.com/code-423n4/2024-03-pooltogether-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.