mediumLogic errorEVM-Solidity
BendDAO: It's impossible to retrieve collected fines from the yield staking contract
- Payout
- $0
- Protocol
- BendDAO
- Disclosed
- Sep 3, 2024
- Source
- code4rena
The YieldStakingBase contract contains an accounting logic error where fines collected from users after forced unstaking events become permanently trapped. While users are required to pay these fines during the repayment process, the contract currently lacks a …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-07-benddao-findings/issues/10
- https://github.com/code-423n4/2024-07-benddao-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.