Security2 hOctober 25, 2026, 06:52

Rounding flaw in Morpho Midnight lets attacker force liquidations

A researcher found a high-severity rounding vulnerability in Tenor Labs migration callbacks built on Morpho Midnight. Because mulDivDown rounds down, repaying 1 wei of debt transfers 0 collateral, pushing the borrower's target-market LTV to infinity and triggering liquidation of existing collateral.

DEV Community

Open source

Rounding flaw in Morpho Midnight lets attacker force liquidations

mulDivDown rounds down: 1000e18 * 1 / (1000e18 + 1) = 0
Repaying 1 wei of debt transfers 0 collateral to the target market
Target-market LTV hits infinity, triggering immediate liquidation
Fix: revert when transfer is zero and repaidUnits > 0

#Morpho#TenorLabs

Plex Media Server SSRF flaw CVE-2026-96652 lets attackers force outbound requests

Security

Japan plans cybersecurity task force after wave of AI-driven attacks

Security

Mississippi mayor says ransomware attack forced Vicksburg to shut down systems

Gadgets

Rounding flaw in Morpho Midnight lets attacker force liquidations

Plex Media Server SSRF flaw CVE-2026-96652 lets attackers force outbound requests

Japan plans cybersecurity task force after wave of AI-driven attacks

Mississippi mayor says ransomware attack forced Vicksburg to shut down systems

Panasonic Let's Note SC7: 919g laptop with a round touchpad