All reports
highFront-running / MEVEVM-Solidity

Notional Exponent: Missing Slippage Protection in Expired PT Redemption Causes User Fund Loss

Payout
$0
Protocol
Notional Exponent
Disclosed
Jul 18, 2025
Source
sherlock

Notional Exponent's Pendle integration redeems expired principal tokens through PendlePTLib.redeemExpiredPT, which calls sy.redeem with minTokenOut hardcoded to zero. When the underlying StandardizedYield contract must perform an external DEX trade to convert …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.