All reports
mediumLogic errorEVM-Solidity

Ammplify: NFTManager `burnAsset` always triggers JIT penalty on removal

Payout
$0
Protocol
Ammplify
Disclosed
Sep 22, 2025
Source
sherlock

Ammplify's NFTManager.burnAsset() closes a maker position by first calling MakerFacet.collectFees(), which writes the current block timestamp into the asset's stored timestamp, and only then calls removeMaker(). Because removeMaker() computes the position's he …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.