highLogic errorEVM-Solidity
Axis Finance: Bidders' funds may become locked due to inconsistent price order checks in MaxPriorityQueue and the _claimBid function.
- Payout
- $0
- Protocol
- Axis Finance
- Disclosed
- Mar 30, 2024
- Source
- sherlock
Axis Finance's Encrypted Marginal Price Auction module orders bids in its MaxPriorityQueue using a cross-multiplication comparison (q1*b2 < q2*b1), while _claimBid validates a bidder's win status by comparing a price computed via Math.mulDivUp directly against …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.