Skip to content

Latest commit

 

History

History
26 lines (22 loc) · 1 KB

Swapping on zero liquidity allows for control of the pool’s price.md

File metadata and controls

26 lines (22 loc) · 1 KB

Swapping on a tick with zero liquidity enables a user to adjust the price of 1 wei of tokens in any direction.

As a result, an attacker could set an arbitrary price at the pool’s initialization or if the liquidity providers withdraw all of the liquidity for a short time.

Recommendation:

No straightforward way to prevent the issue. Ensure pools don’t end up in unexpected states. Warn users of potential risks.


Slide Screenshot

053.jpg


Slide Text

  • ToB Audit Uniswap V3 Finding 8
  • Application-logic
  • Medium Severity
  • Zero Liquidity
  • Control Pool Price
  • Design/Warn Appropriately

References


Tags