mediumLogic errorEVM-Solidity
Autonomint Colored Dollar V1: `Treasury.noOfBorrowers` can be set to 0 by looping wei deposit<->withdrawals and DoS withdrawals and reset borrower debt
- Payout
- $0
- Protocol
- Autonomint Colored Dollar V1
- Disclosed
- Dec 30, 2024
- Source
- sherlock
Autonomint's Treasury tracks an active-borrower count that is incremented only on a user's very first deposit but decremented every time that user's deposited balance returns to zero. Because the two triggers are asymmetric, a single user can deposit and withd …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.