Liquidity Management
Gamma
DeFiFoundry
50,000 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

Front-Running in KeeperProxy.sol

luffy

Summary

The KeeperProxy.sol contract is vulnerable to front-running attacks when executing trades. Keepers could exploit this to manipulate prices or extract value from users

Vulnerability Details

The run function in KeeperProxy.sol does not include mechanisms to prevent front-running, such as slippage protection or deadline enforcement

function run() external onlyKeeper {
// Execute trade logic
}

Impact

A malicious keeper could front-run trades, causing users to receive unfavorable prices and lose funds

Tools Used

manual review

Recommendations

Add slippage protection and deadline enforcement to the run function

function run(uint256 minAmountOut, uint256 deadline) external onlyKeeper {
require(block.timestamp <= deadline, "Transaction expired");
// Execute trade logic with slippage protection
require(amountOut >= minAmountOut, "Slippage too high");
}
Updates

Lead Judging Commences

n0kto Lead Judge 3 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement
Assigned finding tags:

Suppositions

There is no real proof, concrete root cause, specific impact, or enough details in those submissions. Examples include: "It could happen" without specifying when, "If this impossible case happens," "Unexpected behavior," etc. Make a Proof of Concept (PoC) using external functions and realistic parameters. Do not test only the internal function where you think you found something.

n0kto Lead Judge 3 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement
Assigned finding tags:

Suppositions

There is no real proof, concrete root cause, specific impact, or enough details in those submissions. Examples include: "It could happen" without specifying when, "If this impossible case happens," "Unexpected behavior," etc. Make a Proof of Concept (PoC) using external functions and realistic parameters. Do not test only the internal function where you think you found something.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.