mediumLogic errorEVM-Solidity
LooksRare YOLO: The number of deposits in a round can be larger than MAXIMUM_NUMBER_OF_DEPOSITS_PER_ROUND
- Payout
- $0
- Protocol
- LooksRare YOLO
- Disclosed
- Jan 24, 2024
- Source
- sherlock
LooksRare's YOLO lottery enforces a hard invariant that no round may exceed MAXIMUM_NUMBER_OF_DEPOSITS_PER_ROUND (100), but neither depositETHIntoMultipleRounds nor rolloverETH validates that cap. Because _startRound only auto-draws the next round when the pro …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.