mediumInteger overflow/underflowEVM-Solidity
JOJO Exchange Update: FundRateArbitrage is vulnerable to inflation attacks
- Payout
- $0
- Protocol
- JOJO Exchange Update
- Disclosed
- Jan 18, 2024
- Source
- sherlock
JOJO's FundingRateArbitrage vault computed its share index as the contract's net value (including held USDC) divided by totalEarnUSDCBalance. An attacker acting as first depositor could deposit a single share and then donate a large amount of USDC, inflating t …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.