highLogic errorEVM-Solidity
NOYA: Incomplete TVL Calculation in `AerodromeConnector::_getPositionTVL` Function
- Payout
- $0
- Protocol
- NOYA
- Disclosed
- Feb 17, 2025
- Source
- code4rena
NOYA's AerodromeConnector allows an authorized manager to stake LP tokens into an Aerodrome gauge, which transfers those tokens out of the connector and into the gauge contract. However, the connector's _getPositionTVL function only reads the LP-token balance …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-04-noya-findings/issues/1360
- https://github.com/code-423n4/2024-04-noya-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.