Skip to content
Pandora NFT: BugFix Review
hackenproof.com | blog | #web3 | #vulnerability-research | #defi | #smart-contract | #vulnerability-disclosure | #bugfix | #bsc | #defi-security | #nft
Summary
A bugfix review of Pandora NFT's BondRouter: duplicate NFT Security IDs passed to harvest let an attacker reuse one bond to inflate interest payouts; lastHarvest is now updated per loop iteration.
- Published
- Collected