All reports
mediumLogic errorEVM-Solidity

Ammplify: X/Y mix-up in ViewWalker.down will underreport X fees and block taker closes

Payout
$0
Protocol
Ammplify
Disclosed
Sep 22, 2025
Source
sherlock

Ammplify's ViewWalker.down, which propagates taker X/Y fee remainders down the AMM position tree, contains a one-line assignment bug that stores the right-branch token0 (X) fee remainder into rightChildUnpaidY instead of rightChildUnpaidX. Because reads later …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.