mediumLogic errorEVM-Solidity
Notional Exponent: Minting yield tokens single sided can be impossible if CURVE_V2 dexId is used on redemptions
- Payout
- $0
- Protocol
- Notional Exponent
- Disclosed
- Jul 18, 2025
- Source
- sherlock
Notional Exponent's single-sided yield vaults grant infinite token approvals to their Convex/Curve LP pool at deployment so deposits can mint LP tokens, and the strategy code consistently assumes that allowance persists. In this finding, a user exiting double- …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.