1x
Payouts
All
Sherlock
Apr '26
high
[Permission Delegation · XLS-0075] · Medium — `DelegateSet` to AMM pseudo-account inserts `ltDELEGATE` into AMM ownerDir; final `AMMWithdraw` and `AMMDelete` permanently blocked
medium
[Sponsored Fees · XLS-0068] · Low — `AMMDeposit::deposit()` checks sponsor's `xrpLiquid` instead of depositor's; reserve gate enforced against the wrong account