Skip to content
Request an audit

‹ Findings database

Deadline parameter in SyrupUserActions::_swapViaBalancer() could be set to minimize MEV

Low/InfoMaple Syrup audit·Three Sigma·Permissionless lending·23rd August, 20243S-SY-L01

Description

SyrupUserActions sets a minimum amount out limit to prevent excessive MEV. However, as the deadline parameter is set to block.timestamp there is still some room for MEV.

Recommendation

Send a deadline parameter instead of hardcoding 0 to further mitigate MEV.

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests