Security Researcher
High
Total
Payouts
All
Sherlock
May '23
0.43 USDC • 3 total findings • Sherlock • coincoin
#87
high
`rebalance()` is vulnerable to front-running attack due to swap misconfiguration (`amountOutMinimum: 0`)
`burnRebalancer()` and `mintRebalancer()` miss the`onlyBalancer()` modifier
`rebalance()` is using the spot price to perform rebalancing logic making it subject to flashloan attacks