highLogic errorEVM-Solidity
LooksRare YOLO: User can get free entries if the price of any whitelisted ERC20 token is greater than the round's `valuePerEntry`
- Payout
- $0
- Protocol
- LooksRare YOLO
- Disclosed
- Jan 24, 2024
- Source
- sherlock
LooksRare YOLO's deposit entrypoint whitelists the deposited token address but never checks that the declared token type (ERC20 vs ERC721) matches the actual asset being transferred. Because the transferFrom function signature is identical across both standard …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.