highFront-running / MEVEVM-Solidity
LoopFi: Availability of deposit invariant can be bypassed
- Payout
- $0
- Protocol
- LoopFi
- Disclosed
- Jun 12, 2024
- Source
- code4rena
The LoopFi PrelaunchPoints contract suffers from a critical accounting vulnerability where the quantity of lpETH minted or staked is incorrectly derived from the contract's total ETH balance. This flawed logic allows users to inflate their rewards by donating …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-05-loop-findings/issues/33
- https://github.com/code-423n4/2024-05-loop-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.