mediumLogic errorEVM-Solidity
Cap: Attacker/partial liquidator can extend Liquidation action by resetting $.liquidationStart[_agent] to 0.
- Payout
- $0
- Protocol
- Cap
- Disclosed
- Jul 24, 2025
- Source
- sherlock
Cap's lending pool closes a liquidation by resetting `liquidationStart[agent] = 0` based on a health factor recomputed immediately after debt repayment but before the liquidated value is slashed from the position's delegation. Because debt is burned before the …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.