mediumLogic errorEVM-Solidity
Peapods: `addInterest` will not update the interest acurately which would enable users to claim rewards for time that they weren't staked inside `LendingAssetVault`
- Payout
- $0
- Protocol
- Peapods
- Disclosed
- Feb 17, 2025
- Source
- sherlock
Peapods' LendingAssetVault accrues interest on its underlying Fraxlend pairs through an update loop that only calls addInterest when the utilization-rate change exceeds a 0.1% threshold. Because totalAsset and totalBorrow are cached snapshots from the last int …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.