highLogic errorEVM-Solidity
Notional Exponent: Malicious user can change the `TradeType` to steal funds from the vault or withdraw request manager
- Payout
- $0
- Protocol
- Notional Exponent
- Disclosed
- Jul 18, 2025
- Source
- sherlock
Notional Exponent's single-sided LP yield vault and withdraw request manager build DEX trades from caller-supplied TradeParams. Because the caller can set tradeType instead of the contract enforcing TradeType.EXACT_IN_SINGLE, an attacker passing EXACT_OUT_SING …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.