# Slippage protection could be added to LoopedVault::requestWithdraw() in case of black swan event Low/Info · 0xSimao · Leveraged yield farming · 23rd June 2025 Finding L-4 of the Yieldoor LoopedVault Update security review. - Protocol: https://app.yieldoor.com/ - Report: /reports/yieldoor-iii - Source: https://github.com/0xSimao/audits/blob/main/0xSimao/2025-06-23-yieldoor-iii.pdf --- **Description:** It's technically possible for the assets of the `LoopedVault` to decrease suddenly when [requesting](https://github.com/spacegliderrrr/loopedVault/blob/master/src/LoopedVaultV1_1.sol#L517) a withdrawal in between a vesting interval update and a black swan event. This could catch a user withdrawing off guard and make them take a significant loss in case they are frontrun. **Recommended Mitigation:** Consider adding slippage protection. --- Related findings: - [Lack of slippage protection leads to loss of protocol funds](https://0xsimao.com/findings/cork-protocol-lack-slippage-protection-protocol): Cork Protocol - [`VaultV2::withdraw/redeem()` are vulnerable to slippage, so another function could be added to protect users](https://0xsimao.com/findings/morpho-vault-v2-withdraw-redeem-slippage-protect): Morpho Vault V2 - [Destination Vault rewards are not added to idleIncrease when info.totalAssetsPulled > info.totalAssetsToPull](https://0xsimao.com/findings/tokemak-rewards-info-pulled-pull): Tokemak - [Withdrawing after a slash event before the vault has ended will decrease `fixedSidestETHOnStartCapacity` by less than it should, so following users will withdraw more their initial deposit](https://0xsimao.com/findings/saffron-lido-vaults-slash-eth-withdraw-deposit): Saffron Lido Vaults