criticalReentrancyEVM-Solidity
Read-only reentrancy in LP price oracle drains lending market
- Payout
- $1.2M
- Protocol
- Curve-style Lending Market
- Disclosed
- Apr 11, 2023
- Source
- code4rena
A lending market relied on a liquidity pool's raw virtual price function to value LP tokens deposited as collateral. During a liquidity removal operation, ETH transfers to the caller occurred before internal balance and supply states were reconciled, allowing …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.