All reports
mediumLogic errorEVM-Solidity

Tapioca: TOFTOptionsReceiverModule's and UsdoOptionReceiverModule's exerciseOptionsReceiver can lose the option payment provided

Payout
$0
Protocol
Tapioca
Disclosed
Mar 15, 2024
Source
sherlock

Tapioca's option-exercise receiver modules only refund a caller's unused payment when the contract's payment-token balance decreases during exercise. Because TapiocaOptionBroker.exerciseOption() derives the required payment via integer division that can round …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.