mediumLogic errorEVM-Solidity
Cap: VaultAdapter::multiplier not initialized can lead first borrows to have `utilizationRate` = 0
- Payout
- $0
- Protocol
- Cap
- Disclosed
- Jul 24, 2025
- Source
- sherlock
Cap's DebtToken computes its interest rate as a base rate plus a utilization-dependent component, where the utilization component scales with a `multiplier` stored in the VaultAdapter oracle library. Because that storage value defaults to zero, the first borro …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.