amm-oracle

1 article
sort: new top best
clear filter
0 7/10
bug-bounty

Enzyme Finance had a critical price oracle manipulation vulnerability in Idle token pricing where flashloans could manipulate the totalSupply used in price calculations (totalNav/totalSupply). Researcher setuid0 discovered and reported the bug with a working PoC, earning a $90,000 bounty.

Enzyme Finance Immunefi setuid0 SSLab Georgia Tech IdleTokenGovernance.sol IdlePriceFeed.sol ComptrollerLib.sol VaultInterpreter.sol IDerivativePriceFeed.sol Aave Uniswap Sushiswap PancakeSwap Curve Bancor Balancer Chainlink
medium.com · unknown · 17 hours ago · details