Wu said that Dilation Effect discovered a precision loss vulnerability in the core pool series contracts of the Venus lending protocol. When the protocol adds new collateral assets, it can easily allow attackers to exploit this and drain all funds. Specifically, there is a division precision loss issue when the VToken contract of the core pool calculates redeemTokens in the redeemUnderlying function. If the protocol adds new collateral assets on-chain, and the LTV is greater than 0, and the new asset pool is empty (totalSupply=0), when the new asset is mintable, it can be attacked by hackers. This puts all funds within the core pool at risk. Dilation Effect suggests that Venus fully patch this vulnerability (covering all involved chains and all pools), methods could include rounding up the division result when calculating redeemTokens (recommended), imitating Uniswap's design using initial_deposit_amount, or directly removing the redeemUnderlying interface, etc.