Skip to content
Request an audit

‹ Findings database

Missing key events when requesting withdrawals that could be important for the allocator bot

Low/InfoYieldoor LoopedVault Update audit·by 0xSimao·Leveraged yield farming·23rd June 2025L-5

Description:

LoopedVault::requestWithdraw() could emit an event when requesting assets, though it's possible to fetch this information by listening for shares burned.

Recommended Mitigation:

Consider adding an event.

0xSimao:

Fixed in #2a378db.

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests