mediumOracle manipulationEVM-Solidity
Centrifuge Protocol V3.1: `SimplePriceManager.onUpdate()` lack of forward execution fee leads dependent functions to revert
- Payout
- $0
- Protocol
- Centrifuge Protocol V3.1
- Disclosed
- Nov 17, 2025
- Source
- sherlock
Centrifuge's SimplePriceManager.onUpdate() routes share-price updates through Gateway.withBatch(), but the function is not payable and forwards no native token, so the outgoing batch runs with zero execution fuel. When the protocol is not in unpaidMode, Gatewa …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.