highInteger overflow/underflowEVM-Solidity
JOJO Exchange Update: FundingRateArbitrage contract can be drained due to rounding error
- Payout
- $0
- Protocol
- JOJO Exchange Update
- Disclosed
- Jan 18, 2024
- Source
- sherlock
JOJO Exchange's FundingRateArbitrage contract computed the locked earnUSDC amount by rounding down when converting a repaid JUSD amount back into shares. Rounding down made the locked amount smaller than it should be, so the withdrawn earnUSDC amount was infla …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.