mediumPrice manipulationEVM-Solidity
HydraDX: Malicious liquidity provider can put pool into highly manipulatable state
- Payout
- $0
- Protocol
- HydraDX
- Disclosed
- Apr 10, 2024
- Source
- code4rena
HydraDX's StableSwap AMM enforces a minimum-liquidity invariant so that pools cannot be reduced to easily manipulable dust: total pool issuance must stay at or above MinPoolLiquidity or be exactly zero. The remove_liquidity_one_asset() withdrawal enforces this …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-02-hydradx-findings/issues/154
- https://github.com/code-423n4/2024-02-hydradx-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.