Skip to content
Request an audit

‹ Findings database

DarkpoolAssetManager::Split() into 2 equal amounts leads to lost funds

Crit/HighSingularity audit·Three Sigma·Private DeFi access·26th February, 20243S-SG-H10

Description

When using DarkpoolAssetManager::Split(), there is no check to make sure that the 2 resulting notes are not equal, making it impossible to use the second note after the first one as the nullifier will be used by then.

Check the poc here.

Recommendation

In DarkpoolAssetManager::Split() add a _noteOut1 != _noteOut2 check.

Status

Addressed in #8b300f0.

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests