highInteger overflow/underflowEVM-Solidity
Sentiment V2: rounding error due to internal accounting and can steal some portion of the first depositors funds
- Payout
- $0
- Protocol
- Sentiment V2
- Disclosed
- Aug 24, 2024
- Source
- sherlock
Sentiment V2's base pool share accounting let an attacker inflate the pool's share price when supply was zero. Because total pool balance is computed via balanceOf(address(this)) and share conversion rounds down, an attacker could withdraw down to a single sha …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.