All reports
mediumOracle manipulationEVM-Solidity

ZeroLend One: `GenericLogic.sol` contract assumes all price feeds has the same decimals but is a wrong assumption that leads to an incorrect health factor math.

Payout
$0
Protocol
ZeroLend One
Disclosed
Sep 10, 2024
Source
sherlock

ZeroLend One's GenericLogic.calculateUserAccountData aggregates collateral and debt into a base currency by summing asset prices, but it assumes every Chainlink feed returns the same decimal scale (8). Feeds such as AMPL/USD return 18 decimals, so the summed t …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.