highGovernance attackEVM-Solidity
Tapioca DAO: `SGLLiquidation::_computeAssetAmountToSolvency`, `Market::_isSolvent` and `Market::_computeMaxBorrowableAmount` may overestimate the collateral, resulting in false solvency
- Payout
- $0
- Protocol
- Tapioca DAO
- Disclosed
- Nov 16, 2023
- Source
- code4rena
A math order flaw in Tapioca DAO's lending market solvency checks allows users to borrow assets without sufficient collateral. Functions in Market.sol and SGLLiquidation.sol multiply raw YieldBox collateral shares by the exchange rate before converting them to …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-07-tapioca-findings/issues/915
- https://github.com/code-423n4/2023-07-tapioca-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.