highLogic errorEVM-Solidity
Zivoe: ````depositReward()```` with zero amount to get reward tokens stuck in ````ZivoeRewards```` contracts
- Payout
- $0
- Protocol
- Zivoe
- Disclosed
- Apr 25, 2024
- Source
- sherlock
ZivoeRewards.depositReward() is callable by anyone because it carries no access control, and each zero-amount call forces the rewardRate to be recomputed via integer division against the full rewardsDuration. That division truncates the rate, and because a fre …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.