highLogic errorEVM-Solidity
Superfluid Locker System: Staked tokens inside FluidLocker can be withdrawn without calling Unstake
- Payout
- $0
- Protocol
- Superfluid Locker System
- Disclosed
- Jun 11, 2025
- Source
- sherlock
The Superfluid FluidLocker contract lets a locker owner move staked tokens into a Uniswap LP position via provideLiquidity, and later pull those tokens back through withdrawLiquidity, all without ever calling unstake. Because provideLiquidity never checks getA …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.