mediumOracle manipulationEVM-Solidity
ZeroLend One: `GenericLogic.sol` contract assumes all price feeds has the same decimals but is a wrong assumption that leads to an incorrect health factor math.
- Payout
- $0
- Protocol
- ZeroLend One
- Disclosed
- Sep 10, 2024
- Source
- sherlock
ZeroLend One's GenericLogic.calculateUserAccountData aggregates collateral and debt into a base currency by summing asset prices, but it assumes every Chainlink feed returns the same decimal scale (8). Feeds such as AMPL/USD return 18 decimals, so the summed t …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.