mediumLogic errorEVM-Solidity
Sentiment V2: Attacker Can Manipulate Interest Distribution by Exploiting Asset Transfers and Fee Accrual Mechanism
- Payout
- $0
- Protocol
- Sentiment V2
- Disclosed
- Aug 24, 2024
- Source
- sherlock
A Sherlock contestant claimed that a Sentiment V2 SuperPool's ERC4626 interest/fee distribution could be manipulated: by direct-transferring underlying assets into a freshly deployed pool before any user deposit, an attacker could make the unclaimable 'dead' a …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.