Submitted by itsmeSTYJ
Uniswap v2 made oracle attacks much more expensive to execute (since it needs to be manipulated over X number of blocks) however its biggest drawback is that it reacts slow to price volatility (depends on how far back you look). Depending on a single oracle is still very risky and can be exploited given the correct conditions.
Assuming the ideal conditions, it is possible to purchase many keys across many locks for the UDT token that is distributed to the referrer and sell them on some other exchanges where the price of UDT is higher; high enough such that the malicious user can still profit even after requesting for a refund (w/ or w/o a free trial).
This exploit is made possible because of:
The following assumptions has to be true for this attack to work:
julien51 (Unlock Protocol) disagreed with severity and commented:
0xleastwood (judge) commented:
julien51 (Unlock Protocol) commented:
