Skip to content
Request an audit

‹ All findings

CEI pattern is not followed on LoopedVault::fulfillWithdraw()

Low/InfoYieldoor LoopedVault Update·0xSimao · Leveraged yield farming · 23rd June 2025L-3

ReportSource

Description:

LoopedVault::fulfillWithdraw() transfers the asset before updating the state, breaking the CEI pattern.

Recommended Mitigation:

Transfer the assets at the end of the function.

0xSimao:

Fixed in #2a378db.