Submission Details
Severity:
No slippage protection when selling profits
Summary
When profits are swapped for WETH in Fees.sol, no slippage protection is applied whatsoever when executing the swap.
Vulnerability Details
In Fees.sol#L38, the swap is executed with amountOutMinimum: 0 which opens the door for a front-running attack.
Impact
Protocol can incur a loss when selling tokens with no slippage protection.
Tools Used
Manual review
Recommendations
Pass amountOutMin as an argument to sellProfits().
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628
USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.