mediumLogic errorEVM-Solidity
Zivoe: DAO unable to withdraw their funds due to Convex admin action
- Payout
- $0
- Protocol
- Zivoe
- Disclosed
- Apr 25, 2024
- Source
- sherlock
Zivoe disables its OCY_Convex_C locker withdrawals because Convex's BaseRewardPool allows its rewardManager to append extra reward tokens with no upper bound. The DAO's pullFromLocker function force-calls claimRewards before moving assets, so a Convex admin wh …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.