Frontrunning share manipulation
Description:
An attacker can front-run a deposit transaction by depositing a small amount just before a larger deposit. This temporarily inflates the total collateral balance, causing the victim's deposit to receive fewer shares.
Impact:
Theft of value from legitimate depositors.
Undermines the Total Shares Consistency invariant.
Affected Code:
PerpetualVault.sol#deposit()calculates shares using real-time balances.
Recommendation:
Implement a commit-reveal scheme for deposits or use a time-weighted average balance to calculate shares.
Lead Judging Commences
Suppositions
There is no real proof, concrete root cause, specific impact, or enough details in those submissions. Examples include: "It could happen" without specifying when, "If this impossible case happens," "Unexpected behavior," etc. Make a Proof of Concept (PoC) using external functions and realistic parameters. Do not test only the internal function where you think you found something.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.