mediumLogic errorEVM-Solidity
Goat Trading: No check for `initialEth` in `GoatV1Pair.takeOverPool()`.
- Payout
- $0
- Protocol
- Goat Trading
- Disclosed
- Mar 31, 2024
- Source
- sherlock
GoatV1Pair.takeOverPool() allows a new team to seize control of an AMM pool after the initialLP vesting period. The takeover only validates the token amount being contributed (L481) and never checks the initialEth parameter. Because a smaller initialEth produc …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.