mediumLogic errorEVM-Solidity
Convergence Convex Integration: Using `block.timestamp` for swap deadline offers no protection
- Payout
- $0
- Protocol
- Convergence Convex Integration
- Disclosed
- May 1, 2024
- Source
- hats
Convergence's Convex staking integration derives its Uniswap V2/V3 swap deadline from block.timestamp + 1000 inside StakingServiceBase.sol::_depositEth, rather than a caller-supplied absolute value. Under proof-of-stake, a proposer who knows they hold consecut …
Similar reports
- No close matches yet.
References
- https://github.com/hats-finance/Convergence---Convex-integration-0xb3df23e155b74ad2b93777f58980d6727e8b40bb/issues/1
- https://github.com/hats-finance/Convergence---Convex-integration-0xb3df23e155b74ad2b93777f58980d6727e8b40bb
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.