highLogic errorEVM-Solidity
Elfi: Users can use weth to replace any margin token in createUpdatePositionMarginRequest()
- Payout
- $0
- Protocol
- Elfi
- Disclosed
- Jun 20, 2024
- Source
- sherlock
Elfi's PositionFacet.createUpdatePositionMarginRequest fails to validate that the isNativeToken flag matches the position's actual margin token. A user can set isNativeToken=true on a wBTC-margined position, which deposits ether into the shared trade vault whi …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.