mediumLogic errorEVM-Solidity
Plaza Finance: Attacker can drain most of the reserves by weaponizing USDC blacklisting
- Payout
- $0
- Protocol
- Plaza Finance
- Disclosed
- Jan 23, 2025
- Source
- sherlock
Plaza Finance's Auction contract refunds a removed lowest bidder by pushing USDC via safeTransfer inside _removeBid. Because USDC is blacklistable by Circle, an attacker who fills the 1000-bid queue with 999 minimal super-low bids plus one even-lower bid from …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.