highLogic errorEVM-Solidity
Napier: All yield could be drained if users set any ````> 0```` allowance to others
- Payout
- $0
- Protocol
- Napier
- Disclosed
- Feb 26, 2024
- Source
- sherlock
Napier's Tranche.redeemWithYT() has an accounting bug: it transfers the entire accrued yield in target token (accruedInTarget) to the adapter regardless of how much YT is actually being redeemed, instead of transferring only the yield proportional to the redee …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.