TSwapPool::sellPoolTokens
mismatches input and output tokens and users receive the incorrect amount of tokensDescription: The sellPoolTokens
function is intended to allow users to easily sell pool tokens and receive WETH in exchange. Users indicate how many pool tokens they're willing to sell in the poolTokenAmount
parameter. However, the function does a wrong calculation in the swapped amount.
This is due to the fact that the swapExactOutput
function is called, instead the swapExactInput
function.
Impact: Users will swap the wrong amount of tokens, which is a severe disruption of protcol functionality.
Recommended Mitigation:
Consider changing the implementation to use swapExactInput
instead of swapExactOutput
. Note that this would also require changing the sellPoolTokens
function to accept a new parameter (ie minWethToReceive
to be passed to swapExactInput
)
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.