PSA: Ocean contracts were *not* affected by the recently discovered Vyper reentrancy bug.

31 Jul 2023, 08:33
PSA: Ocean contracts were *not* affected by the recently discovered Vyper reentrancy bug. Here's the reentrancy bug, reported by the Vyper team veOCEAN does use Vyper, but is not affected by the bug. Details... Ocean core team has been in touch with the Vyper team to get more info. Ocean uses Vyper in these contracts: veOCEAN, veDelegation, veFeeDistributor, veDelegationProxy, and veFeeEstimate. Only veDelegationProxy uses a vulnerable version of Vyper. However, the reentrancy lock is not used, and there are no external eth calls. So, it's safe.