Skip to content

FLOW-16: Precision loss in cross-VM amount conversions #31

@liobrasil

Description

@liobrasil

Severity: Informational

Files Affected

  • cadence/contracts/FlowYieldVaultsEVM.cdc

Description

Converting between EVM's UInt256 (18 decimals) and Cadence's UFix64 (8 decimals) truncates precision beyond 8 decimal places. Sub-1e-8 FLOW dust may be lost.

Not exploitable - truncation causes users to receive slightly less, not more. The 1 FLOW minimum deposit mitigates dust issues.

Recommendation

Document this limitation for users.


Parent Issue: #15

Metadata

Metadata

Assignees

Labels

InformationalInformational security finding⎈ QuantStampQuantStamp audit finding

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions