Payouts
Top 25
Top 50
All
Sherlock
Jul '23
high
LMPVaultRouterBase pulls the user's funds twice for ETH deposits
high
Attacker can lock Convex rewards
high
AbstractRewarder will pull more tokens than it should in `queueNewRewards()`
high
Vault uses outdated data for share price calculation
high
Vault uses new balance when updating the rewarder for a given user