🚨SlowMist TI Alert🚨
💸
@likwid_fi Loss: 74.31 BNB
🔍 Root Cause: LikwidMarginPosition._executeAddCollateralAndBorrow (leverage=0 branch) never assigns delta.pairDelta, so the borrow path leaves pairReserves untouched. getAmountOut(pairReserves,...) returns the same 4.7857 BNB quote on every call — the attacker repeated the margin/borrow cycle 14 times, settling 211.8M TOKEN at the first-trade marginal price with no AMM price impact.
📌 Attacker EOA: 0x90bde1e0bb16b3deeb9d638acf8d01f19fd2f31e
📌 Attack Contract: 0xc63fb27f52ed8d06673c60c3075b2d3bd26cf4aa
📌 Vulnerable Contract: 0x6bec0c1dc4898484b7f094566ddf8bc82ed7abe8 (LikwidMarginPosition)
📌 Victim Contract: 0x065d449ec9d139740343990b7e1cf05fa830e4ba (LikwidVault)
Powered by
Tx: