highLogic errorEVM-Solidity
Notional Exponent: `DineroWithdrawRequestManager` vulnerable to token overwithdrawal via batch ID overlap
- Payout
- $0
- Protocol
- Notional Exponent
- Disclosed
- Jul 18, 2025
- Source
- sherlock
Notional Exponent's DineroWithdrawRequestManager does not record how many upxETH tokens belong to each individual withdrawal request, even though a single batch ID token can be shared across multiple requests because PirexETH mints partial amounts across share …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.