osmosis
osmosis copied to clipboard
[Transmuter][Audit] Resetting change limiters creates an opportunity window for economic attacks
2. Resetting change limiters creates an opportunity window for economic attacks
Incontracts/transmuter/src/contract.rs:225-228, the states of all change limiters are reset. This is done during the addition of new assets because weights are no longer correct and should be recalculated.
However, change limiters implement protection from rapid market changes and pool imbalances. Removing them, even temporarily, creates an opportunity window for economic attacks. A malicious party, capable of joining the pool with a large position, can simply listen for on-chain events of the pool, and deploy the attack as soon as new assets are added to the pool.