mediumOracle manipulationEVM-Solidity
PoolTogether: `yieldFeeBalance` wouldn't be claimed after calling `transferTokensOut()`
- Payout
- $0
- Protocol
- PoolTogether
- Disclosed
- Apr 4, 2024
- Source
- code4rena
This report identifies an accounting flaw in PoolTogether's PrizeVault contract regarding the calculation of liquidatable amounts. When the vault token is chosen as the output, the TWAB supply limit check does not properly account for the accumulation of yield …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-03-pooltogether-findings/issues/244
- https://github.com/code-423n4/2024-03-pooltogether-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.