mediumAccess controlEVM-Solidity
Napier: Permissioned rebalancing functions leading to loss of assets
- Payout
- $0
- Protocol
- Napier
- Disclosed
- Feb 26, 2024
- Source
- sherlock
Napier's BaseLSTAdapter exposes two permissioned setters that, chained together, let a restricted owner permanently strand user funds. The owner can set the rebalancer to a controlled wallet, drop targetBufferPercentage to the 1% floor (leaving only 1% of depo …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.