mediumFront-running / MEVSolana-Rust
Olas: Missing slippage protection in `liquidity_lockbox::withdraw`
- Payout
- $0
- Protocol
- Olas
- Disclosed
- Feb 6, 2024
- Source
- code4rena
The `liquidity_lockbox` contract fails to implement slippage protection when withdrawing liquidity from Orca whirlpools. By hardcoding the minimum required token outputs to zero, the contract ignores potential market fluctuations and MEV activity during the tr …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-12-autonolas-findings/issues/339
- https://github.com/code-423n4/2023-12-autonolas-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.