highLogic errorEVM-Solidity
Yieldoor: Incorrect tick parameter in collectFees() function leads to loss of vesting position fees or possible complete protocol lockup
- Payout
- $0
- Protocol
- Yieldoor
- Disclosed
- Mar 3, 2025
- Source
- sherlock
Yieldoor's Strategy.collectFees() mistakenly passes mainPosition.tickUpper instead of vestPosition.tickUpper when collecting fees for an ongoing vesting position. Since rebalance() rewrites the main position's ticks via _setMainTicks() while the vesting positi …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.