mediumLogic errorEVM-Solidity
Teller Finance: Performing a direct multiplication in `_getPriceFromSqrtX96` will overflow for some uniswap pools
- Payout
- $0
- Protocol
- Teller Finance
- Disclosed
- Apr 29, 2024
- Source
- sherlock
Teller Finance's LenderCommitmentGroup_Smart computes required borrow collateral from a Uniswap v3 pool price using an internal helper that squares the pool's sqrtPriceX96 with a plain uint256 multiplication before dividing by 2^96. Uniswap permits sqrtPriceX9 …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.