<!-- canonical: https://0xsimao.com/findings/yieldoor-iii-requesting-withdrawals-allocator-bot -->

# Missing key events when requesting withdrawals that could be important for the allocator bot

Low/Info · 0xSimao · Leveraged yield farming · 23rd June 2025

Finding L-5 of the Yieldoor LoopedVault Update security review.

- Protocol: https://app.yieldoor.com/
- Report: /reports/yieldoor-iii
- Source: https://github.com/0xSimao/audits/blob/main/0xSimao/2025-06-23-yieldoor-iii.pdf

---

**Description:**

`LoopedVault::requestWithdraw()` could emit an event when requesting assets, though it's possible to fetch this information by listening for shares [burned](https://github.com/spacegliderrrr/loopedVault/blob/master/src/LoopedVaultV1_1.sol#L529).

**Recommended Mitigation:**

Consider adding an event.

**0xSimao:**

Fixed in [#2a378db](https://github.com/spacegliderrrr/loopedVault/commit/2a378db6c6356887fd029685cc947e4eaa2270b3).

---

Related findings:

- [Important events are missing](https://0xsimao.com/findings/metazero-i-important-events-missing): MetaZero Omnichain NFTs
- [Missing admin change events](https://0xsimao.com/findings/keyring-ii-missing-admin-change-events): Keyring Credentials
- [Missing some events](https://0xsimao.com/findings/metazero-ii-missing-events): MetaZero Staking
- [Missing key zero value check](https://0xsimao.com/findings/codeup-missing-key-zero-value): CODEUP
