highLogic errorEVM-Solidity
ZeroLend One: Wrong calculation of supply/debt balance of a position, disrupting core system functionalities
- Payout
- $0
- Protocol
- ZeroLend One
- Disclosed
- Sep 10, 2024
- Source
- sherlock
ZeroLend One's PositionBalanceConfiguration library has two getters — getSupplyBalance and getDebtBalance — that compute a position's balance incorrectly. Instead of converting shares to the underlying asset amount (shares.rayMul(index)), they add a computed i …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.