mediumLogic errorEVM-Solidity
Notional Leveraged Vaults: Pendle PT and Vault Incentives: _claimRewardToken() will update accountRewardDebt even when there is a failure during reward claiming, as a result, a user might lose rewards.
- Payout
- $0
- Protocol
- Notional Leveraged Vaults: Pendle PT and Vault Incentives
- Disclosed
- Jul 3, 2024
- Source
- sherlock
In Notional's leveraged vault reward accounting, the internal _claimRewardToken() helper advances an account's reward debt before it confirms the reward token transfer actually succeeded. When a transfer quietly fails — from a token balance shortfall or a temp …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.