mediumInteger overflow/underflowEVM-Solidity
Debita Finance V3: Precision loss leads to locked incentives in `DebitaIncentives::claimIncentives()`
- Payout
- $0
- Protocol
- Debita Finance V3
- Disclosed
- Nov 25, 2024
- Source
- sherlock
DebitaIncentives.claimIncentives() computes each lender or borrower's incentive share for a token pair as a percentage rounded to two decimal places. Because the percentage is truncated in integer arithmetic, the remainder of the incentive pool is permanently …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.