First Flight #18: T-Swap

First Flight #18
Beginner FriendlyDeFiFoundry
100 EXP
View results
Submission Details
Severity: medium
Valid

TSwapPool is not compatible with `FoT` and `Rebasing` tokens

Summary

Protocol is not compatible with Fee on Transfer tokens and rebasing tokens. As using that tokens will break the protocol invariant.

Vulnerability Details

TSwap pool uses the balanceOf token everytime to calculate price, without checking the protocol invariant to maintain it's value. Fee on transfer tokens provide less amount to pool while rebasing tokens can do both (increase or decrease balance via rebasing).
If someone donate tokens to pool, they can still manipulate the value of token.

Impact

Incompatible with certain tokens, break the protocol invariant

Tools Used

Manual review

Recommendations

account the balance changes to invariant, so it stay true in all conditions.

Updates

Appeal created

inallhonesty Lead Judge 12 months ago
Submission Judgement Published
Validated
Assigned finding tags:

FoT

Rebase

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.