# Duplicated approval in RebalanceLogic::rebalanceCallback() Low/Info · 0xSimao · Leveraged yield farming · 20th June 2025 Finding I-1 of the Yieldoor LoopedVault security review. - Protocol: https://app.yieldoor.com/ - Report: /reports/yieldoor-ii - Source: https://github.com/0xSimao/audits/blob/main/0xSimao/2025-06-20-yieldoor-ii.pdf --- **Description:** `RebalanceLogic::rebalanceCallback()` approves morpho twice, [1st](https://github.com/spacegliderrrr/loopedVault/blob/master/src/libraries/RebalanceLogic.sol#L131) and [2nd](https://github.com/spacegliderrrr/loopedVault/blob/master/src/libraries/RebalanceLogic.sol#L253). **Recommended Mitigation:** Remove the 2nd approval (or 1st). **0xSimao:** Fixed in [#ad00401](https://github.com/spacegliderrrr/loopedVault/commit/ad0040106a3c92636afd77e1bf511be21bebbe5c).