Submission Details
Severity:
In FeeDistributionBranch.sol::_performMultiDexSwap absence of leftover or partial handling in multi-dex swap can lock tokens
Summary
The function _performMultiDexSwap does not handle leftover tokens, potentially locking them.
Vulnerability Details
The function does not account for leftover tokens after swaps.
Accumulated rounding errors could result in discrepancies.
function _performMultiDexSwap(
AssetSwapPath.Data memory swapPath,
uint256 assetAmount
) internal returns (uint256) {
// ...calls executeSwapExactInputSingle in a loop...
// The function does not handle leftover or partial tokens, returning the
final amount only.
}
Impact
Locked tokens due to unhandled leftovers.
Tools Used
Manual code review.
Recommendations
Implement handling for leftover tokens.
Ensure all tokens are accounted for after swaps.
Prize pool breakdown
Total prize
70,000 USDC
nSLOC
3,25821
USDC / LOC
66,500
3,500
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.