highLogic errorEVM-Solidity
DYAD: Flash loan protection mechanism can be bypassed via self-liquidations
- Payout
- $0
- Protocol
- DYAD
- Disclosed
- Jun 17, 2024
- Source
- code4rena
DYAD's flash-loan protection records a block number at deposit time and reverts same-block withdrawals, but the liquidation path transfers collateral without carrying over that check, so a self-liquidation can deposit, move, and withdraw within one transaction …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-04-dyad-findings/issues/68
- https://github.com/code-423n4/2024-04-dyad-findings
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.