mediumLogic errorEVM-Solidity
WOOFi Swap: `WooCrossChainRouterV4.crossSwap()` doesn't correctly check for slippage
- Payout
- $0
- Protocol
- WOOFi Swap
- Disclosed
- Mar 20, 2024
- Source
- sherlock
WOOFi's WooCrossChainRouterV4.crossSwap() validates the user's minimum acceptable bridged amount inside wooRouter.externalSwap(), but only against the raw swap output before the protocol's external-swap fee is deducted. Because crossSwap() subtracts srcExterna …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.