logic-bug

3 articles
sort: new top best
clear filter
0 6/10
vulnerability

A logic bug in TypedMemView's isValid() function where the `not` instruction (bitwise NOT) was incorrectly used instead of `iszero`, causing the function to always return true regardless of memory bounds validation. This broke memory safety guarantees in the library used by Nomad and other projects.

Nikita Stupin TypedMemView Nomad Immunefi Center for Contemplative Research memview-sol
nikitastupin.com · Nikita Stupin · 23 hours ago · details
0 7/10
bug-bounty

A critical smart contract vulnerability in Notional V2 allowed double-counting of free collateral in bitmap portfolio processing, enabling attackers to drain protocol liquidity by borrowing against overstated collateral. The bug was triggered via sequential calls to enableBitmapForAccount() and depositUnderlyingToken() that caused free collateral calculations to run twice on the same asset.

Notional V2 0x60511e57 Immunefi DAI USDC Ethereum cDAI cUSDC fCash
medium.com · 0x60511e57 · 23 hours ago · details
0 6/10
vulnerability

Iron Bank's seizeInternal() function fails to credit liquidators with the full seized collateral amount due to improper delta accounting, potentially resulting in under-counted collateral that could trigger unexpected liquidations. The vulnerability exists because the collateral buffer is not properly added to the liquidator's accountCollateralTokens.

Iron Bank CCollateralCapERC20.sol 0x7e8844ea4c211a69ad9308ba0b6cdb3ea0bb2b05
trust-security.xyz · Trust · 23 hours ago · details