highReentrancyEVM-Solidity
Predy: Reallocation depends on the `slot0` price, which can be manipulated
- Payout
- $0
- Protocol
- Predy
- Disclosed
- Jul 16, 2024
- Source
- code4rena
In Predy's Perp library, the reallocate function checks whether an LP position is out of range by querying the instantaneous spot price directly from Uniswap V3 pool state via slot0. Because slot0 returns unweighted spot prices, malicious actors can execute sw …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-05-predy-findings/issues/209
- https://github.com/code-423n4/2024-05-predy-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.