mediumLogic errorEVM-Solidity
Yieldoor: `Strategy::checkPoolActivity()` does not look as far back as it should
- Payout
- $0
- Protocol
- Yieldoor
- Disclosed
- Mar 3, 2025
- Source
- sherlock
Yieldoor's Strategy::checkPoolActivity() contains an off-by-one error in its TWAP-based price sanity check used before rebalancing. The function is designed to inspect observations back past a lookAgo timestamp, but because it compares the lookAgo timestamp ag …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.