highLogic errorEVM-Solidity
Cork Protocol: `VaultPoolLib::reserve()` will store the `Pa` not attributed to user withdrawals incorrectly and leave in untracked once it expires again
- Payout
- $0
- Protocol
- Cork Protocol
- Disclosed
- Sep 10, 2024
- Source
- sherlock
In the Cork Protocol Depeg-swap vault, the Pa (paired asset) left over from a liquidated expired LP position is written into `stagnatedPaBalance` by `VaultPoolLib::reserve()` instead of being routed to the AMM, and the downstream `rationedToAmm()` accounting o …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.