mediumGovernance attackEVM-Solidity
Ethereum Credit Guild: ProfitManager's `creditMultiplier` calculation does not count undistributed rewards; this can cause value losses to users
- Payout
- $0
- Protocol
- Ethereum Credit Guild
- Disclosed
- Feb 22, 2024
- Source
- code4rena
A calculation flaw in Ethereum Credit Guild's ProfitManager contract causes excessive token devaluation when bad debt is written off. When reporting loan losses via notifyPnL, the contract slashes creditMultiplier using the token's current total supply rather …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-12-ethereumcreditguild-findings/issues/292
- https://github.com/code-423n4/2023-12-ethereumcreditguild-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.