Skip to content

Request an audit

‹ All findings

Swaps should use the deadline argument on top of minimumAmountOut

MediumTrestle wTIA Bridge·by the Three Sigma team·Modular blockchain infrastructure·27th January 20243S-TR-M02

Report Page Source

Description

Swapping with block.timestamp as deadline means validators may do MEV up to the minimumAmountOut. https://github.com/TrestleProtocol/Audit-Contracts/blob/main/src/Trestle.sol#L441 https://github.com/TrestleProtocol/Audit-Contracts/blob/main/src/Trestle.sol#L709 https://github.com/TrestleProtocol/Audit-Contracts/blob/main/src/Trestle.sol#L727

Status

Addressed by disabling taxes.

Found during Three Sigma’s team review · 0xSimao on the review team