mediumInteger overflow/underflowEVM-Solidity
Centrifuge Protocol V3.1: Incorrectly handled subtraction leads to underflow resulting in permanent user fund lock and DOS
- Payout
- $0
- Protocol
- Centrifuge Protocol V3.1
- Disclosed
- Nov 17, 2025
- Source
- sherlock
Centrifuge V3.1's BatchRequestManager tracks a single aggregate pending-deposit counter per pool/share-class/asset while also keeping per-user pending balances. During deposit approval and share claiming, approveDeposits decrements the aggregate by the full ap …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.