mediumLogic errorEVM-Solidity
Zivoe: Title: Inadequate Allowance Handling in convertAndForward Function of `OCT_DAO` & `OCT_YDL`.
- Payout
- $0
- Protocol
- Zivoe
- Disclosed
- Apr 25, 2024
- Source
- sherlock
Zivoe's OCT_DAO and OCT_YDL locker contracts run a convertAndForward flow that sets a token allowance for the 1inch v5 router, performs the conversion, and then asserts the allowance returned to zero. Because the allowance is never explicitly reset, any swap i …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.