mediumLogic errorEVM-Solidity
Autonomint Colored Dollar V1: Inconsistent Use of `lastCumulativeRate` in `depositTokens()` and `withdraw()` Functions in `Borrowings` Contract
- Payout
- $0
- Protocol
- Autonomint Colored Dollar V1
- Disclosed
- Dec 30, 2024
- Source
- sherlock
The Autonomint `Borrowing` contract's `depositTokens()` and `withdraw()` functions pass the stored `lastCumulativeRate` into `BorrowLib.deposit()` and `BorrowLib.withdraw()` before invoking `calculateCumulativeRate()` to refresh it. Because the stale rate feed …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.