Submitted by WatchPug
LiquidityProviders.sol#L345-L362
LiquidityProviders.sol#L192-L194
The share price of the liquidity can be manipulated to an extremely low value (1 underlying token worth a huge amount of shares), making it possible for sharesToTokenAmount(totalNFTShares, _tokenAddress) to overflow in removeLiquidity() and therefore freeze users funds.
Expected Results: Bob to get back the deposits;
Actual Results: The tx reverted due to overflow at sharesToTokenAmount().
LiquidityProviders.sol#L280-L292
Consider locking part of the first mints liquidity to maintain a minimum amount of totalReserve[token], so that the share price can not be easily manipulated.
ankurdubey521 (Biconomy) confirmed
pauliax (judge) commented:
