Tadle

Tadle
DeFi
30,000 USDC
View results
Submission Details
Severity: high
Valid

Attacker can steal trade tax by calling `abortAskOffer()` after taker bids on ask offer

Updates

Lead Judging Commences

0xnevi Lead Judge 7 months ago
Submission Judgement Published
Validated
Assigned finding tags:

finding-PreMarkets-immediate-withdrawal-allow-maker-steal-funds

Valid high severity, given orginal offer makers are not a trusted entity to enforce a settlement. The trade tax set by the maker should be returned back to the takers to avoid abuse of abortion of ask offers to steal trade tax from takers. Note for appeals period: See issue #528 for additional details

Support

FAQs

Can’t find an answer? Join our Discord or follow us on Twitter.

Cyfrin
Updraft
CodeHawks
Solodit
Resources