All reports
mediumLogic errorEVM-Solidity

Napier: Users are unable to collect their yield if tranche is paused

Payout
$0
Protocol
Napier
Disclosed
Feb 26, 2024
Source
sherlock

Napier's Tranche contract lets management pause the contract while `collect()` carries a `whenNotPaused` modifier, and per contest rules the admin is explicitly RESTRICTED rather than trusted. This means a malicious or compromised admin can call `pause()` to i …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.