Submission Details
Severity:
Unauthorized liquidity removal in `removeLiquidityProportional` function enable the attacker to remove liquidity they do not own.
Updates
Lead Judging Commences
n0kto 3 months ago
Submission Judgement Published Reason: Incorrect statement
Assigned finding tags:
invalid_removing_liquidity_never_check_if_amount_is_owned_by_the_sender
Read bugs with that tag: invalid_onAfterRemoveLiquidity_loop_underflow Because of that implementation, trying to remove more will lead to an underflow.
Prize pool breakdown
Total prize
49,600 OP
nSLOC
3,00017 OP / LOC
44,640
4,960
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.