highLogic errorEVM-Solidity
Cork Protocol: Admin new issuance or user calling `Vault::redeemExpiredLv()` after `Psm::redeemWithCt()` will lead to stuck funds when trying to withdraw
- Payout
- $0
- Protocol
- Cork Protocol
- Disclosed
- Sep 10, 2024
- Source
- sherlock
A checkpoint-ordering flaw in Cork Protocol's Depeg-swap system lets the vault's own ct tokens be burned without redeeming their proportional ra and pa, permanently stranding part of the PSM's reserves. When `PsmLib::_separateLiquidity()` snapshots the full ct …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.