mediumFront-running / MEVEVM-Solidity
Peapods: Malicious actors can front-run setYieldConvEnabled
- Payout
- $0
- Protocol
- Peapods
- Disclosed
- Feb 17, 2025
- Source
- sherlock
Peapods' AutoCompoundingPodLp lets the contract owner toggle reward yield conversion with setYieldConvEnabled. When conversion is disabled, the internal _totalAssets balance does not include unconverted reward tokens that are physically held by the contract. A …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.