All reports
mediumLogic errorEVM-Solidity

Autonomint Colored Dollar V1: excess funds will not always be refunded to borrower when they are withdrawing

Payout
$0
Protocol
Autonomint Colored Dollar V1
Disclosed
Dec 30, 2024
Source
sherlock

In Autonomint's Colored Dollar V1 borrowing contract, `_withdraw()` only refunds the borrower's surplus ETH when `downsideProtected == 0`. When downside protection is active, the code forwards that fee ETH to `_getDownsideFromCDS()` under the assumption that p …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.