highLogic errorEVM-Solidity
Notional Leveraged Vaults: Pendle PT and Vault Incentives: `Kelp:_finalizeCooldown` cannot claim the withdrawal if adversary would requestWithdrawals with dust amount for the holder
- Payout
- $0
- Protocol
- Notional Leveraged Vaults: Pendle PT and Vault Incentives
- Disclosed
- Jul 3, 2024
- Source
- sherlock
The KelpCooldownHolder mediates a two-step withdrawal (rsETH→stETH via Kelp's WithdrawalManager, then stETH→ETH via LidoWithdraw), finalized by _finalizeCooldown when exitVault is invoked. That finalize step hardcodes the 0-th entry in LidoWithdraw.getWithdraw …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.