highFront-running / MEVEVM-Solidity
Superposition: No slippage control when withdrawing a position leads to loss of funds
- Payout
- $0
- Protocol
- Superposition
- Disclosed
- Jan 7, 2025
- Source
- code4rena
Superposition's liquidity-withdrawal path was made insecure after the decr_position_09293696 function was removed, leaving update_position_C_7_F_1_F_740 with a negative delta as the only way to unwind a position. That path carries no slippage protection — the …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-10-superposition-findings/issues/2
- https://github.com/code-423n4/2024-10-superposition-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.