Submission Details
Severity:
Missing ERC-20 Metadata in ZlpVault (EIP-4626 Violation)
Summary
Vulnerability Details
The ZlpVault contract, which implements the ERC-4626 vault standard, does not include ERC-20 metadata functions (name() and symbol()). According to the EIP-4626 specification, all tokenized vaults must implement the ERC-20 metadata extensions, and the name() and symbol() functions should reflect the underlying asset’s metadata.
Impact
Missing metadata can cause user confusion, incorrect UI displays, or failure in integrations.
Tools Used
manual
Recommendations
To comply with EIP-4626, the contract should override ERC-20 metadata functions in ERC4626Upgradeable
Updates
Lead Judging Commences
inallhonesty 4 months ago
Submission Judgement Published Assigned finding tags:
ERC4626 not properly implemented
Prize pool breakdown
Total prize
70,000 USDC
nSLOC
3,25821 USDC / LOC
66,500
3,500
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.