mediumLogic errorEVM-Solidity
Truflation: Ended locks can be extended
- Payout
- $0
- Protocol
- Truflation
- Disclosed
- Jan 8, 2024
- Source
- sherlock
Truflation's VotingEscrowTruf lock-extend function lacked a validation check for whether a lock had already expired. A user whose stake had fully elapsed could call extendLock and set a new end timestamp that was still earlier than the current block time, leav …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.