highInteger overflow/underflowMove
Unchecked arithmetic in Move coin split enables balance underflow
- Payout
- $180k
- Protocol
- Move DEX
- Disclosed
- Sep 27, 2023
- Source
- hats
A custom coin-splitting helper in a Move-based decentralized exchange implemented unsafe u128 downcasting that bypassed native Move checked arithmetic. Combined with a stale balance check preceding an internal callback, an attacker could request a swap amount …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.