Submission Details
Severity:
Division Before Multiplication in `getPenalizedUnderlying()`
Summary
Calculating redeem is susceptible to precision loss due to division before multiplication.
Vulnerability Details
LibUnripe.getPenalizedUnderlying() calculates redeem amount of Ripe Tokens. 1) underlyingAmount multiplication by s.recapitalized 2) dividing by totalUsdNeeded 3) mul by amount 4) div by supply
Impact
redeem of Ripe tokens calculates wrong
Tools Used
Manual
Recommendations
Multiplication before division
Prize pool breakdown
Total prize
21,000 USDC
nSLOC
1,10419 USDC / LOC
17,900 USDC
1,000 USDC
2,100 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.