mediumLogic errorMove
Collective: MaxHeap.sol: Already extracted tokenId may be extracted again
- Payout
- $0
- Protocol
- Collective
- Disclosed
- Feb 8, 2024
- Source
- code4rena
The protocol's MaxHeap implementation fails to properly clear storage when an element is removed, leaving 'dirty' data in the array. During subsequent heap operations, the maxHeapify function may incorrectly read this stale data, leading to the erroneous retri …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-12-revolutionprotocol-findings/issues/266
- https://github.com/code-423n4/2023-12-revolutionprotocol-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.