No slippage protection in `GMXEmergency:emergencyResume`
Summary
When resuming a vault, the slippage parameter is not set for addLiquidity.
Vulnerability Details
The emergencyResume function is called by the owner to resume the vault and re-add assets. The AddLiquidityParams set by the function does not include the minMarketTokenAmt. Since this parameter is used for slippage protection, the vault might receive much less tokens than expected.
Impact
The vault receives less LP tokens than it should.
Tools Used
Manual
Recommendations
Provide a minMarketTokenAmt parameter to the addLiquidity call when resuming the vault.
Lead Judging Commences
Slippage protection on emergency Pause/Resume
Impact: High Likelihood: Low Because the whole lpToken balance is used during the emergency process, the impact is high. But the likelihood is LOW because of the dependence on the emergency.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.