CoinBuggie
All reports
highLogic errorEVM-Solidity

Autonomint Colored Dollar V1: `Borrowing::redeemYields` debits `ABOND` from `msg.sender` but redeems to `user` using `ABOND.State` data from `user`

Payout
$0
Protocol
Autonomint Colored Dollar V1
Disclosed
Dec 30, 2024
Source
sherlock

Autonomint's Borrowing::redeemYields function takes both a msg.sender and a separate user parameter, and uses the user's stored ABOND state (ethBacked and cumulativeRate) to compute how much ETH to redeem from the external Ionic yield protocol, while the ABOND …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.