mediumLogic errorEVM-Solidity
Elfi: The balance.unsettledAmount is missing in the calculations for `getMaxWithdraw` and `isSubAmountAllowed` in UsdPool.sol
- Payout
- $0
- Protocol
- Elfi
- Disclosed
- Jun 20, 2024
- Source
- sherlock
Elfi's UsdPool.sol computes two availability checks — getMaxWithdraw and isSubAmountAllowed — solely from balance.amount minus balance.holdAmount, omitting balance.unsettledAmount, which holds pool fees earned but not yet transferred in. Because isSubAmountAll …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.