highOracle manipulationEVM-Solidity
Abracadabra Money: Anyone making use of the MagicLP's TWAP to determine token prices will be exploitable.
- Payout
- $0
- Protocol
- Abracadabra Money
- Disclosed
- May 3, 2024
- Source
- code4rena
The MagicLP protocol suffered from an oracle manipulation vulnerability where its time-weighted average price (TWAP) calculation was susceptible to frontrunning. Because the TWAP update logic was triggered after pool reserves had been modified, an attacker cou …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-03-abracadabra-money-findings/issues/227
- https://github.com/code-423n4/2024-03-abracadabra-money-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.