mediumAccess controlEVM-Solidity
Debita Finance V3: Previous owner can steal unclaimed bribes from new owner of veNFTVault
- Payout
- $0
- Protocol
- Debita Finance V3
- Disclosed
- Nov 25, 2024
- Source
- sherlock
Debita Finance V3's veNFT receipt system keeps a separate manager role on each vault, defaulting to the vault owner. When a user transfers the receipt (the ownership token) to a buyer, the managerAddress is not rotated, so the seller retains the powers to vote …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.