mediumLogic errorEVM-Solidity
Exactly Protocol Update - Staking Contract: Liquidator will leave a pool with unassigned earnings on `Market::clearBadDebt()` free to claim for anyone when the repaid maturity is not the last
- Payout
- $0
- Protocol
- Exactly Protocol Update - Staking Contract
- Disclosed
- Jul 25, 2024
- Source
- sherlock
In Exactly's Market contract, the earningsAccumulator is only credited with a maturity pool's unassigned earnings during clearBadDebt when fixedPools[maturity].borrowed equals position.principal, which is always zero after the borrower's fixed borrow position …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.