All reports
mediumLogic errorEVM-Solidity

PoolTogether: The Prize Layer for DeFi: Users can setup hooks to control the expannsion of tiers

Payout
$0
Protocol
PoolTogether: The Prize Layer for DeFi
Disclosed
Jun 6, 2024
Source
sherlock

PoolTogether's Claimable.sol lets users register a beforeClaimPrize hook. A user can make that hook revert whenever a claim targets a canary tier, and since tier expansion is decided by whether canary prizes get claimed, this lets a user repeatedly block tier …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.