criticalOracle manipulationEVM-Solidity
Spot TWAP oracle manipulated via single-block flash loan
- Payout
- $900k
- Protocol
- Perp DEX
- Disclosed
- Aug 2, 2023
- Source
- sherlock
A perpetual derivatives protocol relied on a Uniswap V3 TWAP oracle whose pool observation cardinality was capped at 12, severely reducing its intended 30-second time-weighted average window. An attacker executed a single-block flash loan to heavily distort th …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.