Submission Details
Severity:
Incorrect Decimal Handling in DIVA Integration
Summary
The gradient field in Pool struct uses collateral token decimals, while other fields use 18 decimals, leading to payout miscalculations.
Vulnerability Details
Location:
IDIVA.solIssue: Misaligned decimal conventions can break payout logic.
Impact
medium: Incorrect payouts could lead to fund loss or unfair distributions.
Tools Used
Manual code review.
Recommendations
Explicitly document and validate decimal conventions in AaveDIVAWrapperCore.sol.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
51929
USDC / LOC
14,000
1,000
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.