highLogic errorEVM-Solidity
Cork Protocol: Users will steal excess funds from the Vault due to `VaultPoolLib::redeem()` not always decreasing `self.withdrawalPool.raBalance` and `self.withdrawalPool.paBalance`
- Payout
- $0
- Protocol
- Cork Protocol
- Disclosed
- Sep 10, 2024
- Source
- sherlock
Cork Protocol's Vault redemption path has a state-accounting bug. In the partial-redemption branch of `VaultPoolLib::redeem()`, funds pulled from the AMM pool are transferred out but the internal `withdrawalPool.raBalance` and `paBalance` counters are never de …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.