Skip to content
Request an audit

‹ Findings database

If xShadow is token0 or token1, ShadowStrategyGauge::collectGaugeRewards() will take protocol fee on user funds

Low/InfoYieldoor Gauges audit·by 0xSimao·Leveraged yield farming·12th May 2025I-2

Description:

Although at the moment there isn't an xShadow pool, so it's impossible for it to be token0 or token1, ShadowStrategyGauge::collectGaugeRewards() would exit xShadow to shadow, and then convert it back to xShadow, taking a protocol fee in the process.

Recommended Mitigation:

Add a comment or similar.

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests