mediumInteger overflow/underflowEVM-Solidity
Yieldoor: `Vault::_calcDeposit()` will overflow for low priced tokens
- Payout
- $0
- Protocol
- Yieldoor
- Disclosed
- Mar 3, 2025
- Source
- sherlock
Yieldoor's Vault._calcDeposit() computes minted shares as the product depositAmount * bal * totalSupply in one un-downscaled numerator. Because each operand carries 18 decimals, the intermediate already occupies ~1e54 of the 256-bit range, leaving only about 1 …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.