highLogic errorEVM-Solidity
Burve: Incorrect Netting Logic Leads to Excessive Withdrawal Amounts
- Payout
- $0
- Protocol
- Burve
- Disclosed
- May 7, 2025
- Source
- sherlock
Burve's multi-closure vault system contains an arithmetic flaw in the E4626 commit function's deposit/withdrawal netting optimization. When a vertex has both a pending deposit and a pending withdrawal and the withdrawal side is larger, the code zeroes the depo …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.