mediumInteger overflow/underflowEVM-Solidity
Elfi: `isHoldAmountAllowed` and `isSubAmountAllowed` wrong subtraction will result in DoS
- Payout
- $0
- Protocol
- Elfi
- Disclosed
- Jun 20, 2024
- Source
- sherlock
In Elfi's UsdPool storage library, two view guards govern how much stable-token balance can be held versus subtracted. isHoldAmountAllowed permits a hold up to (amount + unsettledAmount - holdAmount), while isSubAmountAllowed checks balance.amount - balance.ho …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.