search

Uniswap / v3-periphery

🦄 🦄 🦄 Peripheral smart contracts for interacting with Uniswap v3
https://uniswap.org
GNU General Public License v2.0
1.15k stars 1.06k forks source link

FullRange missing access controls (security bug) #365

Closed ferencdg closed 8 months ago

ferencdg commented 8 months ago

beforeInitialize should check if it is called by the PoolManager and revert if it isn't

In the current version anyone can override the liquidityToken in the poolInfo

ferencdg commented 8 months ago

It was for v4....