highLogic errorEVM-Solidity
Flayer: The attacker will prevent eligible users from claiming the liquidated balance
- Payout
- $0
- Protocol
- Flayer
- Disclosed
- Sep 15, 2024
- Source
- sherlock
Flayer's CollectionShutdown lets a malicious token holder permanently block legitimate users from claiming liquidated NFT proceeds. Two flaws compound: vote() has no guard against voting after shutdown execution / during the claim state, so anyone can re-flag …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.