highInteger overflow/underflowEVM-Solidity
Axis Finance: Overflow in curate() function, results in permanently stuck funds
- Payout
- $0
- Protocol
- Axis Finance
- Disclosed
- Mar 30, 2024
- Source
- sherlock
Axis Finance's AuctionHouse.curate() lets a seller-designated curator set their fee on an auction. The Routing.funding field is a uint96, so a prefunded auction holding tens of billions of 18-decimal tokens wraps the value down when the unchecked `routing.fund …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.