highLogic errorEVM-Solidity
LEND: Incorrect Collateral Check Logic in CoreRouter.sol#borrow()
- Payout
- $0
- Protocol
- LEND
- Disclosed
- Jun 3, 2025
- Source
- sherlock
LEND's CoreRouter.borrow() queries its lending storage for the hypothetical post-borrow liquidity but then throws away the returned debt value and re-derives borrowAmount by scaling it with the market's borrowIndex. Since interest indices scale token principal …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.