Posted by LRKTBEYK LRKTBEYK on Dec 17
I tried to report these vulnerabilities to ImmuneFi, but they closed it
(report 62070) as “out of scope.” I believe them when they tell me
something is out of scope, so now it’s public.
https://github.com/raydium-io/raydium-cp-swap/pull/62
These vulnerabilities collectively enable fee theft, creator fee hijacking,
and potential user exploitation through uncapped fee rates. Issue #3 allows
attackers to steal all creator fees from…
– Read More – Full Disclosure
