mediumLogic errorEVM-Solidity
Abracadabra Money: A user's tokens could be locked for an extended duration beyond their intention and without their control
- Payout
- $0
- Protocol
- Abracadabra Money
- Disclosed
- May 3, 2024
- Source
- code4rena
In Abracadabra's LockingMultiRewards contract, the stake() and lock() entry points compute each user's unlock timestamp through nextUnlockTime(), which snaps to the next complete reward epoch plus lockDuration rather than honoring a user-specified deadline. A …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-03-abracadabra-money-findings/issues/225
- https://github.com/code-423n4/2024-03-abracadabra-money-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.