First Flight #18: T-Swap

First Flight #18
Beginner FriendlyDeFiFoundry
100 EXP
View results
Submission Details
Severity: high
Valid

Missing slippage check for `swapExactOutput(...)`

Summary

Missing slippage check for swapExactOutput(...)

Vulnerability Details

Missing slippage check for swapExactOutput(...) while it was implemented in swapExactInput(...) as a minOutputAmount check, in swapExactOutput(...), maxInputAmount should be passed as a parameter.

Impact

No slippage tolerance, resulting in an InputAmount larger than expected.

Tools Used

Manual review

Recommendations

Fix the bug

Updates

Lead Judging Commences

inallhonesty Lead Judge
about 1 year ago

Appeal created

inallhonesty Lead Judge about 1 year ago
Submission Judgement Published
Validated
Assigned finding tags:

Lack of slippage protection in `TSwapPool::swapExactOutput` causes users to potentially receive way fewer tokens

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.