mediumLogic errorEVM-Solidity
Oku's New Order Types Contract: User can brick the `Bracket` contract by inputing malicious `txData`
- Payout
- $0
- Protocol
- Oku's New Order Types Contract
- Disclosed
- Dec 9, 2024
- Source
- sherlock
A user can permanently brick the Bracket (and OracleLess) swap contracts by submitting a crafted txData during performUpkeep that consumes amountIn - 1 of the approved tokens, leaving a 1 wei residual allowance on the target. Because the system uses an outdate …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.