mediumReentrancyEVM-Solidity
Panoptic: The Main Invariant "Fees paid to a given user should not exceed the amount of fees earned by the liquidity owned by that user." can be broken due to slight difference when computing collected fee
- Payout
- $0
- Protocol
- Panoptic
- Disclosed
- Jun 24, 2024
- Source
- code4rena
Panoptic's SemiFungiblePositionManager computes collectable fees by dividing each fee-growth snapshot by Q128 before subtracting, whereas Uniswap V3 subtracts growth deltas before scaling. Because integer division truncates each term, rounding leftovers let a …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-11-panoptic-findings/issues/437
- https://github.com/code-423n4/2023-11-panoptic-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.