Submission Details
Severity:
Liquidators can be front-run to their loss
Summary
DSC liquidators are prone to oracle price manipulations and MEV front-run attacks
Vulnerability Details
Sudden token price changes caused by oracle price manipulations and MEV front-run can cause liquidators to get less than expected collateral tokens.
Impact
Liquidators stand to earn less than expected collateral tokens for deposited DSC
Tools Used
Manual review
Recommendations
Function liquidate should have an input parameter uint256 minimumOutputTokens and the function should revert at Ln 253 if
require(totalCollateralToRedeem >= minimumOutputTokens, "Too little collateral received.");
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.