highLogic errorEVM-Solidity
Velocimeter: voters cannot disable max lock
- Payout
- $0
- Protocol
- Velocimeter
- Disclosed
- Jul 25, 2024
- Source
- sherlock
Velocimeter's VotingEscrow.disable_max_lock suffers from an ordering bug when the user disables max lock on the token occupying the last slot of the max_locked_nfts array. The function overwrites that slot with the array's last element before recomputing the m …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.