Skip to content
The Phantom Deposit: How Unvested Rewards and Empty Vaults Lead to Yield Theft in ERC4626
hackenproof.com | research | #bug-bounty | #web3 | #vulnerability-research | #smart-contracts | #defi | #erc4626 | #vault-accounting | #yield-theft
Summary
A guest deep-dive into ERC4626 vault accounting: how unvested rewards combined with a zero-supply state — the 'phantom deposit' — can be gamed to steal yield, from a confidential bounty find.
- Published
- Collected