mediumLogic errorEVM-Solidity
Notional Update #5: getOracleData() maxExternalDeposit not accurate
- Payout
- $0
- Protocol
- Notional Update #5
- Disclosed
- Jan 18, 2024
- Source
- sherlock
Notional's AaveV3HoldingsOracle.getOracleData() computes maxExternalDeposit as supplyCap minus aTokenSupply but omits the reserve.accruedToTreasury amount (rayMulled by nextLiquidityIndex) that Aave's own ValidationLogic counts toward the supply cap. This infl …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.