mediumOracle manipulationEVM-Solidity
Cap: Utilization rate multiplier will not shift if oracle is consulted frequently
- Payout
- $0
- Protocol
- Cap
- Disclosed
- Jul 24, 2025
- Source
- sherlock
Cap's VaultAdapter computes a utilization-rate multiplier that glides toward a target over time. The time-based shift term `(_elapsed * $.rate / 1e27)` is truncated before being combined with the slope factor, so whenever a caller queries the utilization oracl …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.