Description:
LoopedVaultV1_1::rebalance() doesn't have the updateTotalAssets modifier, contrarily to the rest of the functions. Due to the fact that the real new total assets and the stored lastTotalAssets change in the same amount, triggering the vesting period update or not has no impact in the instant total assets, as newVestingInterest = newTotalAssets - lastTotalAssets is the same (minus some negligible rounding), and the vesting amount is exactly the same.
For deposits/withdrawals there is also no difference, except that users want to vest as soon as they deposit.
Recommended Mitigation:
Keep it consistent between functions.
0xSimao:
Fixed in #940648c.