mediumLogic errorEVM-Solidity
Exactly Protocol: Theft of unassigned earnings from a fixed pool
- Payout
- $0
- Protocol
- Exactly Protocol
- Disclosed
- May 4, 2024
- Source
- sherlock
Exactly Protocol's fixed-rate markets calculate the upfront borrow fee with mulDivDown rounding, so a dust-sized principal rounds the fee to zero. An attacker who repeats such dust borrows on a single fixed pool accumulates a large principal carrying no fee, t …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.