mediumLogic errorEVM-Solidity
Napier Finance - LST/LRT Integrations: Kelp adapter won't allow users to deposit if `getAssetCurrentLimit` returns `0`
- Payout
- $0
- Protocol
- Napier Finance - LST/LRT Integrations
- Disclosed
- May 20, 2024
- Source
- sherlock
Napier's Kelp rsETH adapter has a guard-ordering flaw in its internal _stake() function. The stake amount is capped against Kelp's per-asset deposit limit via getAssetCurrentLimit, but the early-return guard for a zeroed stake amount runs before that cap. When …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.