highLogic errorEVM-Solidity
NOYA: `PendleConnector` incorrectly sends the redeemed `PT` tokens to the market
- Payout
- $0
- Protocol
- NOYA
- Disclosed
- Feb 17, 2025
- Source
- code4rena
NOYA's PendleConnector.burnLP burns Pendle LP positions but misroutes the redeemed PT tokens to the market contract address instead of returning them to the connector. Because market.burn() is called with address(market) as the PT receiver rather than address( …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-04-noya-findings/issues/1339
- https://github.com/code-423n4/2024-04-noya-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.