mediumOracle manipulationEVM-Solidity
Flat Money Fix Review: Attacker can steal LPs funds by using different oracle prices in the same transaction
- Payout
- $0
- Protocol
- Flat Money Fix Review
- Disclosed
- Apr 12, 2024
- Source
- sherlock
FlatCoin's fix-review contest flagged that the Pyth oracle can report two different prices within a single transaction, allowing an LP to withdraw liquidity at the higher price in the same transaction as depositing the same amount at the lower price, pocketing …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.