Due to the lack of slippage parameter an MEV attacker could sandwich attack the _mintPosition to return fewer output tokens to the protocol than would otherwise be returned. For StrategyPassiveManagerVelodrome the reduced output tokens applies to the liquidity.
Impact
Due to the lack of slippage parameter an MEV attacker could sandwich attack the _mintPosition to return fewer output tokens to the protocol than would otherwise be returned.
no
high
No slippage parameter on Velodrome
_mintPosition
can be exploited by MEVSummary
No slippage parameter on Velodrome
_mintPosition
can be exploited by MEVVulnerability Detail
Due to the lack of slippage parameter an MEV attacker could sandwich attack the _mintPosition to return fewer output tokens to the protocol than would otherwise be returned. For StrategyPassiveManagerVelodrome the reduced output tokens applies to the liquidity.
Impact
Due to the lack of slippage parameter an MEV attacker could sandwich attack the _mintPosition to return fewer output tokens to the protocol than would otherwise be returned.
Code Snippet
https://github.com/sherlock-audit/2024-05-beefy-cowcentrated-liquidity-manager/blob/main/cowcentrated-contracts/contracts/strategies/velodrome/StrategyPassiveManagerVelodrome.sol#L305C1-L327C6
Tool used
Manual Review
Recommendation
add slippage parameter
Duplicate of #8