criticalAccess controlSolana-Rust
Missing owner check on Solana instruction lets attacker drain vault
- Payout
- $600k
- Protocol
- Solana Yield Vault
- Disclosed
- Nov 3, 2022
- Source
- immunefi
A missing program ownership check in a Solana yield vault protocol allowed unauthorized account spoofing during withdrawal processing. Because the instruction handler accepted an unchecked account and verified only a discriminator byte rather than validating a …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.