highLogic errorEVM-Solidity
Notional Update #5: Lender transactions can be front-run, leading to lost funds
- Payout
- $0
- Protocol
- Notional Update #5
- Disclosed
- Jan 18, 2024
- Source
- sherlock
Notional's wrapped fCash `mintViaUnderlying` exposes a slippage guard via `minImpliedRate`, but the check is skipped whenever the requested fCashAmount exceeds the currently available `maxFCash`, causing the code to take a "lending at zero" branch that deposit …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.