mediumLogic errorEVM-Solidity
Yield Basis: InflationaryVest.vy: Missing update of self.claimed allows infinite multiple claims by the recipient
- Payout
- $0
- Protocol
- Yield Basis
- Disclosed
- Sep 8, 2025
- Source
- sherlock
InflationaryVest.vy exposes a claim() path whose payout is computed from an accounting field, self.claimed, that is read in _claimable() but never incremented after a distribution. As a result the designated recipient can call claim() any number of times and r …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.