highOracle manipulationEVM-Solidity
Salty.IO: The use of spot price by CoreSaltyFeed can lead to price manipulation and undesired liquidations
- Payout
- $0
- Protocol
- Salty.IO
- Disclosed
- Apr 19, 2024
- Source
- code4rena
Salty.IO's CoreSaltyFeed reported the instantaneous spot price of its own AMM pools, which diverges sharply from the Chainlink TWAP reference whenever the market moves and can be deliberately nudged by trading against those pools. The reporter shows that even …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-01-salty-findings/issues/609
- https://github.com/code-423n4/2024-01-salty-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.