The protocol was using block.timestamp as the deadline argument when interacting with the Uniswap NFT Position Manager, making those transactions more vulnerable.
Mitigation
PR-24 successfully mitigates the original issue by replacing hardcoded block.timestamp with input provided deadline throughout the codebase where Position Manager is interacted with.
Lines of code
Vulnerability details
C4 Issue
M-21: Dangerous use of deadline parameter
Issue Details
The protocol was using
block.timestamp
as thedeadline
argument when interacting with the Uniswap NFT Position Manager, making those transactions more vulnerable.Mitigation
PR-24 successfully mitigates the original issue by replacing hardcoded
block.timestamp
with input provided deadline throughout the codebase where Position Manager is interacted with.Conclusion
Mitigation Confirmed