mediumLogic errorEVM-Solidity
Tapioca: The repaying action in `BBLeverage.sellCollateral` function pulls YieldBox shares of asset from wrong address
- Payout
- $0
- Protocol
- Tapioca
- Disclosed
- Mar 15, 2024
- Source
- sherlock
In Tapioca's BigBang lending market, the BBLeverage.sellCollateral function converts a borrower's collateral into YieldBox asset shares that are deposited into the contract itself, then calls _repay to settle the loan. The bug is that it passes the borrower as …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.