All reports
mediumLogic errorEVM-Solidity

Opus: The `provide()` function does not reset withdrawal requests, allowing an attacker to bypass risk-free yield tactics protection

Payout
$0
Protocol
Opus
Disclosed
Mar 8, 2024
Source
code4rena

Opus's absorber is a consolidated stability pool where yin holders contribute liquidity that gets absorbed during liquidations, receiving yang in return that is normally worth more but can be worth less in a bad-debt event. That asymmetry enables an attacker t …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.