mediumLogic errorEVM-Solidity
Plaza Finance: BalancerRouter is implemented incorrectly and will cause loss of funds when depositing to predeposits
- Payout
- $0
- Protocol
- Plaza Finance
- Disclosed
- Jan 23, 2025
- Source
- sherlock
Plaza Finance's BalancerRouter hardcodes a single immutable `balancerPoolToken` address at construction even though the router is designed to interoperate with many Balancer pools. In `joinBalancerPool`, the BPT received is computed by diffing `balanceOf` on t …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.