highLogic errorEVM-Solidity
Yieldoor: Liquidation fee will not be claimed due to incorrect decimal handling
- Payout
- $0
- Protocol
- Yieldoor
- Disclosed
- Mar 3, 2025
- Source
- sherlock
Yieldoor's Leverager contract computes the USD value of a position's debt by dividing by ERC20(denomination).decimals() instead of 10 ** decimals(), inflating borrowedValue by many orders of magnitude. Because the liquidation-fee branch only triggers when tota …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.