May be `sandwich attacked` during emergencyPause
Summary
During emergencyPause, the minimum amount of tokens that should normally be set is not set. This may result in a sandwich attack.
Vulnerability Details
In removeLiquidity, the minimum amount of tokens is determined by minLongTokenAmount: rlp.minTokenAAmt and minShortTokenAmount: rlp.minTokenBAmt. However, these are not set in emergencyPause. Therefore, it may be a target of a sandwich attack.
Impact
Sandwich attacks cause the process to proceed under very unfavorable conditions
Tools Used
Manual
Recommendations
Allow minTokenAAmt and minTokenBAmt to be set directly in the argument of emergencyPause.
Lead Judging Commences
Slippage protection on emergency Pause/Resume
Impact: High Likelihood: Low Because the whole lpToken balance is used during the emergency process, the impact is high. But the likelihood is LOW because of the dependence on the emergency.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.