QuantAMMAdmin is unable to withdraw earnings
Summary
UpliftOnlyExample::onAfterRemoveLiquidity calculates and distributes fees when a user withdraws their position from the protocol. A portion of the shares is allocated to the admin, but an NFT is not minted for the admin, preventing the liquidity from being withdrawn.
Vulnerability Details
Nested fees are not being avoided, and the NFT should be minted via a hook, not solely through UpliftOnlyExample::addLiquidityProportional.
Impact
The admin will be unable to withdraw their earnings.
If withdrawal is possible, nested fees would be generated, preventing the admin from receiving the full amount owed.
Tools Used
Manual Review
Recommendations
Mint an NFT for the admin.
Lead Judging Commences
finding_Uplift_admin_cannot_withdraw_without_nft
Likelihood: High, won’t be able to withdraw. Impact: High, funds stuck.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.