highLogic errorEVM-Solidity
NOYA: It is possible to open insolvent position in Silo connector, due to missing check in borrow function
- Payout
- $0
- Protocol
- NOYA
- Disclosed
- Feb 17, 2025
- Source
- code4rena
In NOYA's Solidity connector layer, the SiloConnector exposes a borrow() entry point that calls Silo's borrow directly with no post-condition on the resulting health of the connector's position, whereas the paired repay() enforces SolvencyV2.isSolvent against …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-04-noya-findings/issues/926
- https://github.com/code-423n4/2024-04-noya-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.