All reports
mediumLogic errorEVM-Solidity

MagicSea - the native DEX on the IotaEVM: Lack of support for fee on transfer, rebasing and tokens with balance modifications outside of transfers.

Payout
$0
Protocol
MagicSea - the native DEX on the IotaEVM
Disclosed
Jul 11, 2024
Source
sherlock

MagicSea, the native DEX on IotaEVM, does not measure the actual token delta on transfers in its staking and reward contracts, so fee-on-transfer deductions, rebasing balance shifts, and edge cases like stETH's 1-wei rounding loss are ignored. MasterchefV2 dep …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.