🏦Resource bank to more slippage vulnerabilities

This page is a open resource where any examples of slippage bugs found in bug bounties, audit reports or live attacks are to be added here.

Book an audit with Zokyo

Links

Rekt - Jimbo's Protocol - REKTrekt

UniswapHelper.buyFlanAndBurn is a subject to sandwich attacks · Issue #230 · code-423n4/2022-01-behodler-findingsGitHub

Slippage checks when adding liquidity are too strict · Issue #257 · code-423n4/2021-11-malt-findingsGitHub

`addLiquidity` Does Not Reset Approval If Not All Tokens Were Added To Liquidity Pool · Issue #228 · code-423n4/2021-11-malt-findingsGitHub

Frontrunning in UniswapHandler calls to UniswapV2Router · Issue #219 · code-423n4/2021-11-malt-findingsGitHub

`mintSynth()` and `burnSynth()` can be front run · Issue #209 · code-423n4/2021-11-vader-findingsGitHub

Minting and burning synths exposes users to unlimited slippage · Issue #2 · code-423n4/2021-11-vader-findingsGitHub

regerralFeePool is vulnerable to MEV searcher · Issue #62 · code-423n4/2021-10-mochi-findingsGitHub

Missing slippage checks · Issue #171 · code-423n4/2021-07-spartan-findingsGitHub