highAccess controlEVM-Solidity
stNXM by EaseDeFi: Owner can steal funds on withdraw by burning wrong Uniswap V3 position liquidity
- Payout
- $0
- Protocol
- stNXM by EaseDeFi
- Disclosed
- Nov 21, 2025
- Source
- sherlock
The stNXM contract's decreaseLiquidity() owner function accepts an arbitrary Uniswap V3 tokenId without verifying that the position belongs to the wNxm/stNxm pool. Because the contract burns the collected stNXM amount against the total share supply, an owner c …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.