highInteger overflow/underflowEVM-Solidity
Notional Exponent: DoS might happen to `DineroWithdrawRequestManager#_initiateWithdrawImpl()` due to overflow on `++s_batchNonce`
- Payout
- $0
- Protocol
- Notional Exponent
- Disclosed
- Jul 18, 2025
- Source
- sherlock
In Notional Exponent's DineroWithdrawRequestManager, the withdraw request ID is built by packing a uint16 nonce (`s_batchNonce`) together with two batch IDs into a single uint256 via bit shifts. Because the counter is only 16 bits, `++s_batchNonce` reverts onc …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.