mediumLogic errorEVM-Solidity
Notional Update #5: Malicious users could block liquidation or perform DOS
- Payout
- $0
- Protocol
- Notional Update #5
- Disclosed
- Jan 18, 2024
- Source
- sherlock
Notional's SecondaryRewarder uses a push model: whenever reward balances update, the accumulated incentive token is transferred out inside the same transaction via safeTransferOut. Because the reward token can be any ERC20 (e.g., ARB today, arbitrary tokens la …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.