highLogic errorEVM-Solidity
Exactly Protocol: The Rounding Done in Protocol's Favor Can Be Weaponized to Drain the Protocol
- Payout
- $0
- Protocol
- Exactly Protocol
- Disclosed
- May 4, 2024
- Source
- sherlock
Exactly Protocol's floating-audit market lets an attacker amplify the accounting value of a single share when a market's totalSupply is zero. By exploiting mint rounding down and withdraw rounding up, the attacker inflates one share to be worth a large amount, …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.