Slippage parameter is not specified correclty in the `Fees::sellProfits()` function
Summary
The swap in Fees::sellProfit() is executed without specify the correct amountOutMinimum value, opening up to a loss of funds via front running sandwich or another type of price manipulation.
Vulnerability Details
The Fees::sellProfit() function helps to make a swap using an Uniswap Router.
The problem is that the slippage amountOutMinimum parameter is zero, that is extremely dangeraus because the amountOutMInimum = 0 means that the caller accept zero as the minimum amount out tokens from the swap.
Impact
Loss of funds via front running sandwich or another type of price manipulation.
Tools used
Manual review
Recommendations
Follow the Uniswap recommendation by calculating the correct price using an onchain oracle.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.