Submission Details
Severity:
Fees.sellProfits doesn't have deadline protection
Summary
Fees.sellProfits doesn't have deadline protection.
Vulnerability Details
deadline protection is needed in order to not allow anyone to cache your tx in the pool and then execute it, when uniswap prices has changed. This can protect users from losses.
Currently Fees.sellProfits contract provides block.timestamp as deadline, which means that tx can be executed any time.
Impact
Loss of funds for seller.
Tools Used
VsCode
Recommendations
Make ability for seller to provide deadline.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.