highFront-running / MEVEVM-Solidity
Yearn yBOLD: A malicious attacker can steal 25% of the funds of the first depositor in a strategy
- Payout
- $0
- Protocol
- Yearn yBOLD
- Disclosed
- May 25, 2025
- Source
- sherlock
The Yearn yBOLD strategy, built on Yearn's TokenizedStrategy vault logic, is vulnerable to a first-depositor share-inflation attack. Because the StrategyFactory performs no initial deposit when deploying a new strategy, an attacker can front-run the first legi …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.