highInteger overflow/underflowEVM-Solidity
Rubicon: Due to the loss of precision, `openPosition` will make the user's leverage higher than expected
- Payout
- $0
- Protocol
- Rubicon
- Disclosed
- Feb 17, 2025
- Source
- code4rena
Rubicon's Position.sol `_borrowLimit` rounds down the target position size (via wmul) when converting a user's requested initMargin and long leverage into a desired amount and a final-loop borrow fraction. For a long leverage barely above 1x (e.g. 1e18+1), the …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-04-rubicon-findings/issues/281
- https://github.com/code-423n4/2023-04-rubicon-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.