mediumLogic errorEVM-Solidity
Rubicon: `RubiconMarket: buy()` may not take any fee for tokens with low decimal precision
- Payout
- $0
- Protocol
- Rubicon
- Disclosed
- Feb 17, 2025
- Source
- code4rena
RubiconMarket computes taker and maker fees with integer arithmetic (amount * feeBPS / 100_000) at a default feeBPS of 1 (0.01%). For stablecoins with only 2 decimals, such as gUSD or EURS, three-figure nominal trades map to raw units small enough that the fee …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-04-rubicon-findings/issues/457
- https://github.com/code-423n4/2023-04-rubicon-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.