mediumLogic errorEVM-Solidity
Plaza Finance: User may lose funds if they call `BalancerRouter::joinBalancerAndPredeposit`
- Payout
- $0
- Protocol
- Plaza Finance
- Disclosed
- Jan 23, 2025
- Source
- sherlock
Plaza Finance's BalancerRouter forwards Balancer pool tokens (BPT) into PreDeposit.deposit, but PreDeposit's _deposit silently clamps any amount that would exceed reserveCap down to the remaining capacity, transferring only that remainder from the caller. Beca …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.