Dria

Summary

purchase can be frontrunned and someone can call relisting to DOS buyers. This can have a lasting impact as purchases are made by the AI agent and one failed purchase could make the whole transaction reverted and affect the buyer's earnings.

Vulnerability Details

Example attack scenario:

we can create malicious sellers with fake things ti sell who keep on resliting to another buyer ( can be his own account and dosing the purchase whenever the llm selects on of the assets to be the malicious one)

Impact

Legitimate buyers cannot complete purchases
Market manipulation possible
Sellers can grief buyers at will
Undermines market reliability

Tools Used

Code review

Recommendations