highLogic errorEVM-Solidity
Peapods: Vault inflation attack in `AutoCompoundingPodLp` is possible due to incorrectly minting dead shares
- Payout
- $0
- Protocol
- Peapods
- Disclosed
- Feb 17, 2025
- Source
- sherlock
Peapods' AutoCompoundingPodLpFactory mints the anti-inflation minimum deposit of 1e3 shares to msg.sender at deployment instead of to a dead address, so those shares are withdrawable and the inflation protection fails. An attacker who frontruns deployment keep …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.