VirtuSwap Stealing funds using virtual pools with multicall BugFix review
hackenproof.com | blog | #web3 | #vulnerability-research | #defi | #dex | #hackenproof | #defi-security | #bugfix-review | #virtuswap | #multicall
Summary
A bugfix review of VirtuSwap: repeating swaps via multicall in a single block desynchronized virtual pool balances, letting an attacker skew rates and steal funds — up to two-thirds of assets.
- Published
- Collected
Skip to content