First Flight #18: T-Swap

First Flight #18
Beginner FriendlyDeFiFoundry
100 EXP
View results
Submission Details
Severity: high
Valid

Missing slippage check for `swapExactOutput(...)`

Summary

Missing slippage check for swapExactOutput(...)

Vulnerability Details

Missing slippage check for swapExactOutput(...) while it was implemented in swapExactInput(...) as a minOutputAmount check, in swapExactOutput(...), maxInputAmount should be passed as a parameter.

Impact

No slippage tolerance, resulting in an InputAmount larger than expected.

Tools Used

Manual review

Recommendations

Fix the bug

Updates

Lead Judging Commences

inallhonesty Lead Judge
11 months ago

Appeal created

inallhonesty Lead Judge 11 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Lack of slippage protection in `TSwapPool::swapExactOutput` causes users to potentially receive way fewer tokens

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.