mediumLogic errorEVM-Solidity
Munchables: When `LockManager.lockOnBehalf` is called from `MigrationManager`, the user's `reminder` will be set to 0, resulting in fewer received `MunchableNFTs`
- Payout
- $0
- Protocol
- Munchables
- Disclosed
- Jun 21, 2024
- Source
- code4rena
In Munchables, the private `_lock` function in LockManager deliberately skips the remainder and NFT-count calculation whenever `msg.sender` is the MigrationManager. Because `lockedToken.remainder` is written back after that guarded block, the migration path ov …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-05-munchables-findings/issues/455
- https://github.com/code-423n4/2024-05-munchables-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.