highLogic errorEVM-Solidity
Tapioca: TOFTOptionsReceiverModule miss cross-chain transformation for deposit and lock amounts
- Payout
- $0
- Protocol
- Tapioca
- Disclosed
- Mar 15, 2024
- Source
- sherlock
Tapioca's TOFTOptionsReceiverModule processes inbound cross-chain messages but applies the local-decimals conversion (_toLD) only to the top-level minted amount, leaving nested fields such as the collateral deposit amount and the option lock amount/fraction at …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.