Skip to content
Request an audit

‹ Findings database

Note footers should not be 0 in curveRemoveLiquidity() if the corresponding assetOuts are non null

Crit/HighSingularity audit·Three Sigma·Private DeFi access·26th February, 20243S-SG-H01

Description

In curveRemoveLiquidity(), the note footer should not be allowed to be 0 if assetOut is non null, as this could lead to duplicate note footers.

Recommendation

Revert if the note footer is 0 but the corresponding asset out is not.

Status

Addressed in #8b300f0.

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests