mediumLogic errorEVM-Solidity
Gondi: `confirmBaseInterestAllocator()` change `BaseInterestAllocator` may pay large `getReallocationBonus`
- Payout
- $0
- Protocol
- Gondi
- Disclosed
- Jul 25, 2024
- Source
- code4rena
Gondi lets an owner propose a new BaseInterestAllocator and any user finalize the switch via confirmBaseInterestAllocator(). On confirmation, the old allocator's full balance is transferred back into the Pool by transferAll() before the state pointer is swappe …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-04-gondi-findings/issues/22
- https://github.com/code-423n4/2024-04-gondi-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.