Notional V2

An attacker exploited an unchecked uint128 cast in Notional V1’s collateral valuation logic. By minting two fCash positions against the same payer with notionals of 1 and 2^128-1, the attacker engineered a debt balance of exactly 2^128.

abs()) truncated 2^128 to zero, making the insolvent payer appear to have no debt. 73M in USDC and DAI from the Escrow.