highLogic errorEVM-Solidity
Saffron Lido Vaults: The incorrect accounting of protocol fee will cause double charging fee and wrong distribution of earnings for variable users
- Payout
- $0
- Protocol
- Saffron Lido Vaults
- Disclosed
- Sep 21, 2024
- Source
- sherlock
In Saffron's Lido vault contract, variable-side earnings accounting mishandles the protocol fee when a user withdraws during the ongoing (started, not ended) period. The full earnings amount, including the protocol fee portion, is converted to Lido staking sha …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.