mediumFlash loan attackEVM-Solidity
Origami: Adversary can block any `exit` due to `preCheck` reached `cap` by using flash-loan
- Payout
- $0
- Protocol
- Origami
- Disclosed
- Feb 25, 2024
- Source
- hats
Origami's circuit breaker enforces a rolling daily cap on ovUSDC redemptions via preCheck, which both validates the rolling-period total and writes the exit amount into the active time bucket. Because the breaker cannot distinguish organic user exits from flow …
Similar reports
- No close matches yet.
References
- https://github.com/hats-finance/Origami-0x998f1b716a5022be026ca6b919c0ddf45ca31abd/issues/27
- https://github.com/hats-finance/Origami-0x998f1b716a5022be026ca6b919c0ddf45ca31abd
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.