highOracle manipulationEVM-Solidity
Renzo: Incorrect calculation of queued withdrawals can deflate TVL and increase ezETH mint rate
- Payout
- $0
- Protocol
- Renzo
- Disclosed
- Jun 7, 2024
- Source
- code4rena
A key lookup flaw in Renzo's OperatorDelegator contract resulted in queued strategy withdrawals being excluded from protocol TVL calculations. When calculating underlying strategy balances, the contract queried the mapping with the contract address rather than …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-04-renzo-findings/issues/395
- https://github.com/code-423n4/2024-04-renzo-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.