mediumLogic errorEVM-Solidity
Elfi: User Collateral Cap Check Issue
- Payout
- $0
- Protocol
- Elfi
- Disclosed
- Jun 20, 2024
- Source
- sherlock
Elfi's AssetsProcess.deposit enforces a per-user collateral cap (collateralUserCap) but checks the user's pre-deposit token balance instead of the balance after the new deposit is credited. Because the validation executes before params.amount is added, a user …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.