mediumLogic errorEVM-Solidity
Sentiment V2: Lack of slippage protection during withdrawal in SuperPool and Pool contracts.
- Payout
- $0
- Protocol
- Sentiment V2
- Disclosed
- Aug 24, 2024
- Source
- sherlock
Sentiment V2's Pool.withdraw() and SuperPool withdraw/redeem functions compute share/exchange rates at execution time without any min-amount-out or max-shares-in slippage guard. If a bad-debt liquidation lands in the same block interval as a user's pending wit …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.