commit f16623e
The mitigation introduced a new function Pools#depositZapSwapWithdraw(). Unlike depositSwapWithdraw() and depositDoubleSwapWithdraw(), arbitrage doesn't occur in depositZapSwapWithdraw(). It will be used in Liquidity#depositLiquidityAndIncreaseShare() for imbalanced amounts zapping. Zapping amount is limited to less than 1% of the reserve to mitigate slippage risk.
Lines of code
Vulnerability details
Mitigation
commit f16623e The mitigation introduced a new function
Pools#depositZapSwapWithdraw()
. UnlikedepositSwapWithdraw()
anddepositDoubleSwapWithdraw()
, arbitrage doesn't occur indepositZapSwapWithdraw()
. It will be used inLiquidity#depositLiquidityAndIncreaseShare()
for imbalanced amounts zapping. Zapping amount is limited to less than 1% of the reserve to mitigate slippage risk.Conclusion
LGTM