highOracle manipulationEVM-Solidity
Notional Exponent: Attacker can drain the entire suppliers on Morpho market by inflating collateral price
- Payout
- $0
- Protocol
- Notional Exponent
- Disclosed
- Jul 18, 2025
- Source
- sherlock
A Notional Exponent YieldStrategy integrates directly with Morpho as an oracle: its price() determines how much loan a depositor can borrow against YieldStrategy shares held as collateral. The flaw is that initiateWithdraw() escrows the user's shares (raising …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.