highLogic errorEVM-Solidity
Zivoe: cannot forward extra rewards from both OCY_Convex to OCT_YDL.
- Payout
- $0
- Protocol
- Zivoe
- Disclosed
- Apr 25, 2024
- Source
- sherlock
Zivoe's Convex locker vaults (OCY_Convex_A/B/C) mishandled Convex pool extra-reward contracts by treating the VirtualBalanceRewardPool children returned by extraRewards() as ERC-20 tokens. The code called rewardToken().balanceOf() and safeTransfer() on the poo …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.