Submission Details
Impact:
Likelihood:
Missing Minimum Amount Check for Token Deposits
Description
The initialize_pool function only checks that deposited amounts are non-zero:
require!(
amount_token_a > 0 && amount_token_b > 0,
AmmError::NoZeroProvision
);
It does not enforce a meaningful minimum, allowing pools to be initialized with very low token amounts.
Impact
Setting tiny initial reserves results in unrealistic price ratios and high price impact on trades. This makes the pool unusable for real trading and can mislead users and price aggregators.
Recommendation
Add a minimum threshold to ensure healthy pool initialization:
const MIN_LIQUIDITY: u64 = 10_000;
require!(
amount_token_a >= MIN_LIQUIDITY && amount_token_b >= MIN_LIQUIDITY,
AmmError::InsufficientLiquidity
);
Rewards breakdown
This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.