highFront-running / MEVEVM-Solidity
Burve: An attacker can drain assets from a Closure by exploiting the NoopVault via a donation attack
- Payout
- $0
- Protocol
- Burve
- Disclosed
- May 7, 2025
- Source
- sherlock
Burve's NoopVault is a minimal ERC4626 wrapper that serves as a vertex vault inside the protocol's Closures. Because it initializes with zero total supply and zero assets and has no defense such as virtual shares or a non-zero initial mint, it is exposed to th …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.