mediumLogic errorEVM-Solidity
USG - Tangent: `ZappingProxy` cannot receive ETH refunds resulting in failed zaps
- Payout
- $0
- Protocol
- USG - Tangent
- Disclosed
- Sep 11, 2025
- Source
- sherlock
USG Tangent's ZappingProxy lets users zap between tokens by forwarding msg.value to external routers when the input is the native chain coin. Because the proxy contract has no payable receive() or fallback() function, routers that refund unspent ETH to the cal …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.