Aave DIVA Wrapper
DIVA
HardhatDeFi
15,000 USDC
View results
Previous Next
Submission Details
Severity: medium
Invalid

Lack of Slippage Check Throughout the Protocol

davies0212

Summary

The protocol currently lacks slippage checks in its functions, including redeemPositionToken(). This oversight poses a risk, potentially resulting in users receiving less than the expected amount.

Vulnerability Details

Functions like redeemPositionToken do not include slippage checks for the collateral amounts received.

Without these checks, users cannot actively respond to fluctuations within the DIVA protocol, leading to unexpected amounts being received.

function redeemPositionToken(
address _positionToken,
uint256 _positionTokenAmount,
address _recipient
) external override nonReentrant returns (uint256) {
return _redeemPositionToken(_positionToken, _positionTokenAmount, _recipient);
}

Impact

The absence of slippage checks may result in users receiving unexpectedly lower amounts.

Tools Used

Manual Review

Recommendations

Implement slippage checks to safeguard against potential losses.

Updates

Lead Judging Commences

bube Lead Judge 6 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.