Submitted by WatchPug
SwapUtils.sol#L1053-L1062
self.adminFees[i] should be reset to 0 every time its withdrawn. Otherwise, the adminFees can be withdrawn multiple times.
The admin may just be unaware of this issue and casualty withdrawAdminFees() from time to time, and rug all the users slowly.
Change to:
LayneHaber (Connext) confirmed and resolved:
0xleastwood (judge) commented:
