mediumFlash loan attackEVM-Solidity
Napier Finance - LST/LRT Integrations: Incorrect checking in `receiveFlashLoan` can cause `swapETHForYt` to fail unexpectedly.
- Payout
- $0
- Protocol
- Napier Finance - LST/LRT Integrations
- Disclosed
- May 20, 2024
- Source
- sherlock
Napier's MetapoolRouter validates the flash-loan repayment in receiveFlashLoan by comparing the repay amount against the user's remaining balance after subtracting WETH proceeds, rather than against the total ETH the user supplied. When a victim swaps ETH for …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.