highInteger overflow/underflowEVM-Solidity
Axis Finance: Downcasting to uint96 can cause assets to be lost for some tokens
- Payout
- $0
- Protocol
- Axis Finance
- Disclosed
- Mar 30, 2024
- Source
- sherlock
Axis Finance's EMPAM batch auction module writes settlement data by downcasting the summed quote-token proceeds into uint96 with no overflow guard. Because each individual bid amount stays below the uint96 cap while their accumulated total can exceed 2^96 for …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.