mediumOracle manipulationEVM-Solidity
Notional Update #5: The use of spot data when discounting is subjected to manipulation
- Payout
- $0
- Protocol
- Notional Update #5
- Disclosed
- Jan 18, 2024
- Source
- sherlock
Notional's wfCash redemption path calls a view function that prices the cash owed to the user off live spot market data (utilization and the resulting two-kink interest rate). Because the rate curve is steep just below Kink 1, an attacker who deposits enough p …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.