mediumAccess controlEVM-Solidity
Tapioca: Balancer rebalance operation is permanently blocked whenever owner assigns `rebalancer` role to some other address
- Payout
- $0
- Protocol
- Tapioca
- Disclosed
- Mar 15, 2024
- Source
- sherlock
Tapioca's Balancer contract gates its cross-chain rebalance operation with a role check written as `msg.sender != owner() || msg.sender != rebalancer`, a condition that is always true whenever the owner and rebalancer are distinct addresses. Because the constr …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.