mediumLogic errorCosmos-SDK
Dango DEX: XYK reflect_curve omits swap fee in order sizing, leaking LP fees
- Payout
- $0
- Protocol
- Dango DEX
- Disclosed
- Sep 29, 2025
- Source
- sherlock
Dango DEX's XYK passive-liquidity reflect_curve computes total order sizes from pool reserves without applying the configured swap fee, so reflected passive orders are matchable as if they were fee-free. A taker can match these orders and pay no swap fee while …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.