mediumLogic errorEVM-Solidity
Malda: MixedPriceOracleV4.sol :: getUnderlyingPrice()/getPirce() will not work for some tokens because API3 and EO oracles return prices using different decimals, causing DOS scenario.
- Payout
- $0
- Protocol
- Malda
- Disclosed
- Aug 14, 2025
- Source
- sherlock
Malda's MixedPriceOracleV4 aggregates quotes from two independent feeds — API3, which returns 18-decimal prices, and the EO oracle, which returns 8-decimal prices — to price lending mToken underlyings in USD. Because _absDiff() compares the two raw price value …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.