You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description
Everytime a user tries to add or remove liquidity on curve pool, it will result in DOS due to the EVM error resulting from mismatched interface and the actual curvefinance pool's implementation of:
add_liquidity()
remove_liquidity()
remove_liquidity_one_coin()
The dispatcher contract assumes different incorrect parameters for these functions as compared to their actual onchain implementation
like for example, the onchain remove_liquidity_one_coin() takes: uint, int, and uint parameters as input
Github username: @burhankhaja
Twitter username: imaybeghost
Submission hash (on-chain): 0xa38867060a6fa9f91ce75467625f3aeec950fe70c7b5bbb9b812945ed9d9e76d
Severity: high
Description:
Bug Category
Protocol Insolvency
Description
Everytime a user tries to add or remove liquidity on curve pool, it will result in DOS due to the EVM error resulting from mismatched interface and the actual curvefinance pool's implementation of:
The dispatcher contract assumes different incorrect parameters for these functions as compared to their actual onchain implementation
like for example, the onchain remove_liquidity_one_coin() takes:
uint, int, and uint parameters as input
DAI-USDT-USDC Pool:
Unfortunately On the other hand, the dispatcher contract assumes different parameters for remove_liquidity_one_coin()
Dispatcher.sol
Therefore EVM error is triggered everytime user triggers these commands:
The text was updated successfully, but these errors were encountered: