mediumLogic errorMove
Current Finance: Double subtraction of cash_reserve in deposit_limit_breached allows bypassing the maximum deposit limit
- Payout
- $0
- Protocol
- Current Finance
- Disclosed
- Mar 16, 2026
- Source
- sherlock
Current Finance's Sui Move lending market enforces a per-asset maximum deposit cap through the deposit_limit_breached guard, but that guard subtracts cash_reserve twice when computing the current pool size. Because total_deposit_plus_interest already reduces t …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.