complete
findings
Identified 3 issues: removeToken can corrupt the token list when given an unbound token, pool accounting assumes full transfer amounts, and share minting relies entirely on an external TVL oracle without internal sanity...
Top findings
-
medium
Accounting assumes full transfer amounts (fee-on-transfer/rebasing tokens break invariants)
-
medium
Share minting fully trusts external TVL oracle without internal sanity checks
-
low
removeToken can desync dynasetTokens and records when passed an unbound token