mediumOracle manipulationEVM-Solidity
WOOFi Swap: Price manipulation by swapping any ````baseToken```` with itself
- Payout
- $0
- Protocol
- WOOFi Swap
- Disclosed
- Mar 20, 2024
- Source
- sherlock
WOOFi's WooPPV2 swap path never rejects swaps where fromToken equals toToken, so an attacker can repeatedly swap a base token with itself. Because the wooracle state and price are cached in memory at the start and the post-swap price is recomputed and posted u …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.