`LiquidationPool.so`::`distributeAssets`PAXG uses fee on transfer and an attacker can drain tokens from the pool using flashloan
Summary
Due to the fees on transfer for PAXG, liquidity providers will receive less than expected on the asset distribution in LiquidationPool.so::distributeAssets.
Also PAXG uses fee on transfer and an attacker can drain tokens from the pool using flashloan similar to what happened with STA.
Vulnerability Details
Due to the fees on transfer for PAXG, liquidity providers will receive less than expected on the asset distribution in LiquidationPool.so::distributeAssets.
Also PAXG uses fee on transfer and an attacker can drain tokens from the pool using flashloan similar to what happened with STA.
Impact
Liquidity providers receive less because of the fees on transfer on PAXG.
Tools Used
Manual Review
Recommendations
Remove PAXG and add another safer token. You will court the attention of attackers just by using PAXG. Drop it for another safer token.
Lead Judging Commences
fee-on-transfer
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.