QuantAMM

Summary

UpliftOnlyExample::onAfterSwap() some fees taken from the swap are not sent to quantAMMAdmin or Hook owner, but sent to UpliftOnlyExample it self with no retrievable way for the tokens

Vulnerability Details

after pool swap, there is a hook called onAfterSwap() in UpliftOnlyExample to deduct swap fees for the hook contract, (part of it is sent to the Quant admin)

But the problem in the above code is that it sends the fees amount ownerFee to it self, with no function to retrieve those tokens

Impact

Loss of swap fees

Tools Used

Manual review

Recommendations

use the ownerFee to be donated to the pool like the logic in onAfterRemoveLiquidity Hook or if its intended to be sent to Pool owner, then send those tokens to him like the way you did with admin fees