mediumLogic errorEVM-Solidity
LoopFi: `INFLATION_PROTECTION_TIME` can not be up to a year as intended because it is hardcoded to `1749120350`
- Payout
- $0
- Protocol
- LoopFi
- Disclosed
- Feb 17, 2025
- Source
- code4rena
LoopFi's AuraVault gates AURA reward distribution on a compile-time constant, INFLATION_PROTECTION_TIME, pinned to the absolute Unix timestamp 1749120350 instead of being derived from deployment. Because the claim function only sends AURA to users while block. …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-07-loopfi-findings/issues/247
- https://github.com/code-423n4/2024-07-loopfi-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.