Skip to content
Request an audit

‹ Findings database

Casting from int256 to uint256 won't revert if the number is negative, possibly leading to issues

MediumOstium audit·Three Sigma·RWA perpetuals DEX·19th February, 20243S-OS-M11

Description

Some instances, namely in OstiumPairInfos::getPendingAccFundingFees(), cast int256 to uint256.

Recommendation

Avoid casting directly and use a wrapper library instead such as SafeCastUpgradeable.

Status

Addressed in #38b09ab.

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests