High
CVSS 7.5 Oracle Manipulation Sherlock
Disclosure
EMA/Spot Price Divergence Excess Collateral Seizure in Lending Liquidation
Liquidation eligibility uses EMA price but collateral seizure uses spot price with no tolerance check, enabling liquidators to extract excess collateral during price divergence.
- Target
- Sui L1 Lending Protocol
- Category
- Oracle Manipulation
- Channel
- Sherlock
- Disclosed
- 2026-03
Redaction note
Vendor identity withheld.
This finding is documented here as part of MemCyber’s public disclosure record. The vendor has been anonymized to a sector and region descriptor. Full technical detail — including root cause, reproducible proof-of-concept, remediation guidance, and vendor attribution where granted — is available to qualified prospects under NDA.
Coordinated disclosure
How we handled it.
- Reported to the vendor via Sherlock with a reproducible proof-of-concept.
- Triage + remediation window coordinated with the vendor security team.
- Fix verified before any public reference.
- This record published only after the embargo period closed.