mediumInteger overflow/underflowEVM-Solidity
Teller Finance: `LenderCommitmentGroup_Smart` does not use `mulDiv` when converting between token and share amounts, possibly leading to DoS or loss of funds
- Payout
- $0
- Protocol
- Teller Finance
- Disclosed
- Apr 29, 2024
- Source
- sherlock
Teller Finance's LenderCommitmentGroup_Smart computes the pool's share exchange rate and underlying value using direct multiplication followed by division instead of OpenZeppelin's overflow-safe mulDiv. Because the protocol accepts any ERC20 that a Uniswap poo …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.