mediumLogic errorEVM-Solidity
BendDAO: `executeYieldBorrowERC20()` checking `yieldCap` is wrong
- Payout
- $0
- Protocol
- BendDAO
- Disclosed
- Sep 3, 2024
- Source
- code4rena
The executeYieldBorrowERC20 function in BendDAO uses an incorrect interest rate index when validating yield capacity limits. By calculating total supply against the borrow index rather than the supply index, the protocol relies on inaccurate financial data for …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-07-benddao-findings/issues/35
- https://github.com/code-423n4/2024-07-benddao-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.