highOracle manipulationEVM-Solidity
Abracadabra Money: Oracle price can be manipulated
- Payout
- $0
- Protocol
- Abracadabra Money
- Disclosed
- May 3, 2024
- Source
- code4rena
The Abracadabra Money MagicLpAggregator contract incorrectly relies on spot liquidity pool reserves to determine asset prices. Because these reserves can be easily manipulated through large trades, an attacker can use a flash loan to temporarily inflate the re …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-03-abracadabra-money-findings/issues/75
- https://github.com/code-423n4/2024-03-abracadabra-money-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.