mediumOracle manipulationEVM-Solidity
Yieldoor: `Strategy::checkPoolActivity()` incorrect check leads to vulnerable price
- Payout
- $0
- Protocol
- Yieldoor
- Disclosed
- Mar 3, 2025
- Source
- sherlock
Yieldoor's Strategy::checkPoolActivity() validates Uniswap V3 TWAP observations before executing a rebalance, but its staleness check only rejects observation slots whose timestamp is zero. Uniswap V3's Oracle.grow() initializes freshly-allocated slots with a …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.