Submission Details
Severity:
ZLP Vault Share Inflation Attack
Summary
First depositors can manipulate share prices in ERC4626-style ZLP vaults.
Vulnerability Details
A malicious user deposits a tiny amount, then donates large collateral to inflate share value
Impact
Later LPs receive fewer shares than expected.
Tools Used
Manual analysis of ZLP vault contracts.
Recommendations
Enforce a minimum initial deposit (e.g., 1e6 units).
Updates
Lead Judging Commences
inallhonesty
4 months ago
inallhonesty 4 months ago
Submission Judgement Published Reason: Incorrect statement
Assigned finding tags:
[INVALID] first deposit attack
Prize pool breakdown
Total prize
70,000 USDC
nSLOC
3,25821 USDC / LOC
66,500
3,500
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.