highInteger overflow/underflowEVM-Solidity
Autonomint Colored Dollar V1: Total cds deposited amount is incorrectly modified when cds depositor is at a loss, leading to stuck USDa
- Payout
- $0
- Protocol
- Autonomint Colored Dollar V1
- Disclosed
- Dec 30, 2024
- Source
- sherlock
The Autonomint CDS (collateralized debt) module corrupts its running bookkeeping total of deposited USDa whenever a depositor withdraws while at a loss. In CDSLib.sol:713 the contract decreases totalCdsDepositedAmount by the full returned amount — which alread …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.