All reports
mediumLogic errorEVM-Solidity

Dango DEX: Attacker can exploit thin liquidity in xyk pool to save on fees.

Payout
$0
Protocol
Dango DEX
Disclosed
Sep 29, 2025
Source
sherlock

Dango DEX computes the swap fee for multi-hop instant swaps from the output of the final pool in the route. An attacker who supplies a majority of the liquidity to a thin XYK pool at the end of the route can route a large trade through that pool, withdraw most …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.