highLogic errorEVM-Solidity
Notional Update #5: Residual ETH not sent back when `batchBalanceAndTradeAction` executed
- Payout
- $0
- Protocol
- Notional Update #5
- Disclosed
- Jan 18, 2024
- Source
- sherlock
Notional Update #5's wrapped-fCash wrapper contains a residual-funds accounting flaw: when a user lends through the wrapper's _lendLegacy path in native ETH, Notional V3's TokenHandler.depositUnderlyingExternal refunds any excess deposited ETH back to the wrap …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.