All reports
mediumLogic errorEVM-Solidity

Peapods: LendingAssetVault incorrectly updates vaultUtilization if CBR for a single FraxlendPair decreases.

Payout
$0
Protocol
Peapods
Disclosed
Feb 17, 2025
Source
sherlock

Peapods' LendingAssetVault recomputes a FraxlendPair vault's utilization whenever its CBR (asset/share ratio) changes. When the CBR decreases, the percentage-change formula inverts the ratio, overstating the drop: a 1.5e27 to 1e27 decline is treated as 50% ins …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.