highLogic errorEVM-Solidity
Asymmetry Finance: `price()` in `AfEth.sol` doesn't take afEth held for pending withdrawals into account
- Payout
- $0
- Protocol
- Asymmetry Finance
- Disclosed
- Feb 6, 2024
- Source
- code4rena
Asymmetry's AfEth.price() computes share value as total vault TVL divided by totalSupply(), but requestWithdraw() transfers each withdrawing user's afEth into the AfEth contract without burning it, so totalSupply() stays inflated relative to the assets still b …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-09-asymmetry-findings/issues/25
- https://github.com/code-423n4/2023-09-asymmetry-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.