mediumLogic errorEVM-Solidity
Palmera: Incomplete Deletion of Organization State Leads to Residual Effects on New Users
- Payout
- $0
- Protocol
- Palmera
- Disclosed
- Jun 24, 2024
- Source
- hats
Palmera's organization deletion path removes an org record but fails to clear all organization-scoped storage, leaving stale denylist and feature-configuration state such as allowFeature, listed[org], and listCount behind. Because organization identity appears …
Similar reports
- No close matches yet.
References
- https://github.com/hats-finance/Palmera-0x5fee7541ddcd51ba9f4af606f87b2c42eea655be/issues/27
- https://github.com/hats-finance/Palmera-0x5fee7541ddcd51ba9f4af606f87b2c42eea655be
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.