mediumAccess controlEVM-Solidity
Malda: Rebalancer can drain market funds via excessive bridge fees
- Payout
- $0
- Protocol
- Malda
- Disclosed
- Aug 14, 2025
- Source
- sherlock
Malda's lending protocol grants a semi-trusted REBALANCER_EOA role the ability to move liquidity between market contracts through the Everclear bridge. That role calls Rebalancer.sendMsg, which forwards an unchecked message blob to EverclearBridge; the bridge …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.