mediumLogic errorEVM-Solidity
MagicSea - the native DEX on the IotaEVM: Inconsistent check in `harvestPositionsTo()` function
- Payout
- $0
- Protocol
- MagicSea - the native DEX on the IotaEVM
- Disclosed
- Jul 11, 2024
- Source
- sherlock
MagicSea's MlumStaking contract implements harvestPositionsTo(), an external non-reentrant function meant to allow either an NFT position owner or an ERC721-approved operator to harvest staking rewards to a destination address. The function first gates the cal …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.