mediumOracle manipulationEVM-Solidity
stNXM by EaseDeFi: Missing Uniswap V3 cardinality initialization in `StNxmOracle` leads to permanent Denial of Service
- Payout
- $0
- Protocol
- stNXM by EaseDeFi
- Disclosed
- Nov 21, 2025
- Source
- sherlock
The StNxmOracle contract prices stNXM from a 30-minute Uniswap V3 TWAP, but its constructor only stores the pool address and never grows the pool's observation buffer. Newly initialized Uniswap V3 pools keep a default observationCardinality of 1, which holds o …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.