highOracle manipulationEVM-Solidity
Plaza Finance: BondOracleAdapter will cause massive loss of funds for a large number of bond tokens
- Payout
- $0
- Protocol
- Plaza Finance
- Disclosed
- Jan 23, 2025
- Source
- sherlock
Plaza Finance's BondOracleAdapter incorrectly prices bond tokens by returning the Slipstream pool's quote verbatim while hardcoding the oracle decimals to bondToken.decimals(). Because the dex getPool mapping is populated in both token orders without normalizi …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.