QuantAMM

Summary

While UpdateWeightRunner implements access controls for pool management, it fails to protect against malicious admins deploying upgradeable hooks that can be later modified to extract value from users through excessive fees or liquidity manipulation.

Vulnerability Details

1. Admin deploys seemingly benign upgradeable hook with normal fees

2. Users trust and interact with pool using this hook

3. Admin can upgrade hook implementation to:

   • Increase swap fees up to 50%

   • Reduce liquidity provided to users

   • Extract value through manipulated calculations

4. UpdateWeightRunner's access controls cannot prevent this attack vector

Impact

• Users lose funds through excessive fees

• Protocol reputation damage

Tools Used

Manual review

Recommendations

in QuantAMMWeightedPoolFactory white list NewPoolParams.poolHooksContract