Submission Details
Severity:
Swap is vulnerable to frontrunning attack
Summary
The sellProfits function is vulnerable to the fronrun attack.
Vulnerability Details
Minimum out amount is not specified which may lead to the frontranning (sandwich) attack.
Impact
This may result in manipulations and transfering _profits tokens from the contract with not appropriate WETH amount returning. The amount of tokens returned may be less than expected.
Tools Used
VS Code
Recommendations
Add the minimumOut parameter to the function and pass it as the amountOutMinimum parameter to the swap.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628
USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.