Submitted by zhaojohnson
LP holders will remove liquidity and then burn their liquidity position. If re-org happens, malicious users can manipulate the pools price to cause users removing liquidity revert. Then LP holders position will be burned and liquidity will be locked in contract.
In lib.rs, users can burn their position. From this functions comment, Calling this function leaves any liquidity or fees left in the position inaccessible., its users responsibility to remove their liquidity before they burn their position.
The problem is that even if users follow this rule, remove liquidity at first, and then burn their position, users may still lose their funds.
Re-org is one common scenario in Arbitrum. When re-org happens, some transactions will be re-ordered and re-executed.
For example:
Add some more check on burn_position_AE401070(), revert if there are some left liquidity.
Context
af-afk (Superposition) confirmed and commented:
0xsomeone (judge) commented:
Silvermist (warden) commented:
Blckhv (warden) commented:
0xsomeone (judge) commented:
Note: For full discussion, see here.
