highLogic errorEVM-Solidity
LEND: Drainage of the LEND token reserves through repeated claims of the same rewards
- Payout
- $0
- Protocol
- LEND
- Disclosed
- Jun 3, 2025
- Source
- sherlock
CoreRouter.claimLend() disburses a depositor's accrued LEND reward by calling grantLendInternal(), but the code ignores the function's return value and never zeroes out lendStorage.lendAccrued for the holder after a successful transfer. Because the accrued bal …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.