mediumAccess controlSolana-Rust
Lavarage: Lack of freeze authority check for collateral tokens on create trading pool
- Payout
- $0
- Protocol
- Lavarage
- Disclosed
- May 29, 2024
- Source
- code4rena
Lavarage's lending flow accepts SPL tokens as collateral, moving tokens between a borrower account and a protocol PDA on borrow and repay. The integration never verifies whether the collateral token's mint carries an active freeze_authority. Because a freeze_a …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-04-lavarage-findings/issues/31
- https://github.com/code-423n4/2024-04-lavarage-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.