Submission Details
Severity:
TSwapPool::getInputAmountBasedOnOutput` has an incorrect fee calculation resulting in lost fees due to too many tokens taken away from users
Summary
getInputAmountBasedOnOutput calculates the amount of tokens deposited by the user. Unfortunately, it miscalculates the result by 10,000 instead of the intended 1000.
Vulnerability Details
Lines 280-294
Impact
More fees are taken from users than expected
Tools Used
Manual Review
Recommendations
function getInputAmountBasedOnOutput(
uint256 outputAmount,
uint256 inputReserves,
uint256 outputReserves
)
public
pure
revertIfZero(outputAmount)
revertIfZero(outputReserves)
returns (uint256 inputAmount)
{
- return ((inputReserves * outputAmount) * 10_000) / ((outputReserves - outputAmount) * 997);
+ return ((inputReserves * outputAmount) * 1_000) / ((outputReserves - outputAmount) * 997);
}
Updates
Appeal created
inallhonesty over 1 year ago
Submission Judgement Published Assigned finding tags:
Incorrect fee calculation in TSwapPool::getInputAmountBasedOnOutput causes protocol to take too many tokens from users, resulting in lost fees
Rewards breakdown
nSLOC
276This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.