mediumLogic errorEVM-Solidity
Zivoe: Forwarding yield in `OCL_ZVE` is possible a lot more often than the enforced 30 days
- Payout
- $0
- Protocol
- Zivoe
- Disclosed
- Apr 25, 2024
- Source
- sherlock
Zivoe's OCL_ZVE locker enforces a 30-day cooldown on forwardYield() by requiring block.timestamp to exceed nextYieldDistribution, which is incremented by 30 days at the end of each call. However, nextYieldDistribution starts at zero, so if a user calls forward …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.