highLogic errorEVM-Solidity
Ammplify: Attackers can drain the protocol tokens
- Payout
- $0
- Protocol
- Ammplify
- Disclosed
- Sep 22, 2025
- Source
- sherlock
Ammplify's Maker.newMaker() accepts a caller-supplied pool address without verifying it is a genuine Uniswap V3 pool created by the official factory. Because every pool address is written into the POOL_GUARD_SLOT before its mint() is invoked, an attacker can s …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.