mediumLogic errorEVM-Solidity
Exactly Protocol: Manipulation of the floating debt by updating `floatingBackupBorrowed`
- Payout
- $0
- Protocol
- Exactly Protocol
- Disclosed
- May 4, 2024
- Source
- sherlock
Exactly's fixed-pool entry points updated the market utilization factor floatingBackupBorrowed without first accruing outstanding floating debt, so the past debt was recomputed at the manipulated utilization. An attacker could call withdrawAtMaturity near matu …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.