mediumLogic errorEVM-Solidity
Plaza Finance: Wrong modifier on `PreDeposit::setBondAndLeverageAmount` function leads to big differences in user balances
- Payout
- $0
- Protocol
- Plaza Finance
- Disclosed
- Jan 23, 2025
- Source
- sherlock
Plaza Finance's PreDeposit contract gates the `setBondAndLeverageAmount` function with the `checkDepositNotEnded` modifier, so governance can only commit the bond and leverage amounts while user deposits and withdrawals are still permitted. A griefer (or even …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.