Submission Details
Severity:
SmartVaultV3 Swap Fee Discrepancy
Vulnerability Details
The function calculates the swap fee based on the ISmartVaultManagerV3 contract's swapFeeRate() and HUNDRED_PC() values.
However, the calculated fee isn't utilized in the params struct, where a hardcoded value of 3000 is used for the fee field.
Impact
This mismatch results in inconsistent and potentially inaccurate swap fees
Tools Used
Manual Review
Recommendations
Replace the hardcoded fee: 3000 in the params struct with fee: swapFee.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
60933 USDC / LOC
17,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.