mediumFlash loan attackEVM-Solidity
Zivoe: ZivoeYDL::distributeYield yield distribution is flash-loan manipulatable
- Payout
- $0
- Protocol
- Zivoe
- Disclosed
- Apr 25, 2024
- Source
- sherlock
ZivoeYDL::distributeYield computes the split of protocol and residual earnings between the stZVE and vestZVE recipients from each token's live totalSupply taken at call time. Because that snapshot is captured in the same transaction as the transfers, an attack …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.