mediumInteger overflow/underflowEVM-Solidity
Axis Finance: Unsafe casting within _purchase function can result in overflow
- Payout
- $0
- Protocol
- Axis Finance
- Disclosed
- Mar 30, 2024
- Source
- sherlock
Axis Finance's FPAM fixed-price auction module computes the payout inside _purchase as amount × 10^baseTokenDecimals / price and then casts the result into a uint96. When the quote token uses few decimals (e.g., 6) while the base token uses 18, the intermediat …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.