highLogic errorEVM-Solidity
Elfi: Canceling a mint stake token can result in the execution fee being sent from the wrong vault
- Payout
- $0
- Protocol
- Elfi
- Disclosed
- Jun 20, 2024
- Source
- sherlock
Elfi's mint-stake-token flow mishandles execution-fee accounting when a user deposits a native token as collateral. Because the deposit is routed to the portfolio vault but the isExecutionFeeFromLpVault flag is set true, cancelling the order refunds the execut …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.