mediumLogic errorEVM-Solidity
Rubicon: Incorrect fee handling in `Position.sol's` Market `Buy`/`Sell` functions
- Payout
- $0
- Protocol
- Rubicon
- Disclosed
- Feb 17, 2025
- Source
- code4rena
Rubicon's `Position.sol` helpers `_marketBuy` and `_marketSell` pre-calculate the market fee and inject it into their order sizing before routing through `RubiconMarket`, which already accounts for the same fee on v2 trades. The result is double (incorrect) fe …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-04-rubicon-findings/issues/282
- https://github.com/code-423n4/2023-04-rubicon-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.