All reports
highReentrancyEVM-Solidity

Abracadabra Money: Attacker can amplify a rounding error in MagicLP to break the I invariant and cause malicious pricing

Payout
$0
Protocol
Abracadabra Money
Disclosed
May 3, 2024
Source
code4rena

Abracadabra Money's MagicLP pools suffer from a precision error during initial liquidity provision that allows an attacker to manipulate the pool's pricing invariant. By exploiting rounding logic in the buyShares function, an attacker can create a pool with a …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.