Steadefi

Summary

The swap operation could be susceptible to front-running attacks where a malicious miner could see the transaction in the mempool and front-run it to their advantage.

Vulnerability Details

The function uses the msg.sender to set the refundee which could be front-run by an attacker.

Impact

An attacker could potentially manipulate the transaction order to their advantage, for example by inserting their own transaction before the victim's transaction is finished.

Tools Used

Slither, Manual Review

Recommendations

Consider using a commit-reveal scheme or similar mechanism to prevent front-running.