mediumLogic errorSolana-Rust
Dango DEX: Any change in bucket size will DOS order cancellation leading to frozen user funds and halts the entire auction
- Payout
- $0
- Protocol
- Dango DEX
- Disclosed
- Sep 29, 2025
- Source
- sherlock
Dango's auction-based DEX tracks liquidity depth per bucket, keyed by the bucket sizes configured when an order is created. When an administrator later updates pair bucket sizes via a batch update, order cancellation and auction cleanup both call decrease_liqu …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.