mediumGovernance attackEVM-Solidity
BendDAO: `YieldEthStakingLido` lacks a limit on the max stake amount, which may result in the unstake exceeding `MAX_STETH_WITHDRAWAL_AMOUNT`, resulting in the token not being retrieved
- Payout
- $0
- Protocol
- BendDAO
- Disclosed
- Sep 3, 2024
- Source
- code4rena
The YieldEthStakingLido contract contains a logic flaw that prevents users from unstaking funds if their staked stETH balance exceeds Lido's 1,000 stETH limit per withdrawal request. Because the contract attempts to process the entire withdrawal amount in a si …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-07-benddao-findings/issues/36
- https://github.com/code-423n4/2024-07-benddao-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.