mediumAccess controlEVM-Solidity
Neutrl Protocol: FULL_RESTRICTED_STAKER_ROLE Blacklist Bypass in Deposit and Mint Functions
- Payout
- $0
- Protocol
- Neutrl Protocol
- Disclosed
- Aug 24, 2025
- Source
- sherlock
Neutrl's sNUSD vault token enforced its blacklist incompletely on the deposit path. The _deposit() function gated only SOFT_RESTRICTED_STAKER_ROLE on the caller and receiver while omitting FULL_RESTRICTED_STAKER_ROLE, so a fully restricted/sanctioned user coul …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.