Incorrect Decoding of Swap Results Leads to Ineffective Slippage Protection

[c4-bot-7]

Lines of code

https://github.com/code-423n4/2024-08-superposition/blob/4528c9d2dbe1550d2660dac903a8246076044905/pkg/sol/SeawaterAMM.sol#L316
https://github.com/code-423n4/2024-08-superposition/blob/4528c9d2dbe1550d2660dac903a8246076044905/pkg/sol/SeawaterAMM.sol#L316
https://github.com/code-423n4/2024-08-superposition/blob/4528c9d2dbe1550d2660dac903a8246076044905/pkg/seawater/src/lib.rs#L194

Vulnerability details

The swapOut5E08A399() and swapOutPermit23273373B() functions in the SeawaterAMM contract incorrectly decode the results of a swap operation, leading to ineffective slippage protection. This issue arises from a mismatch between the swap direction and the order of decoded values.

In both functions, a swap is executed with zeroForOne set to false, indicating a swap from token1 to token0. However, when decoding the swap results, the order of swapAmountIn and swapAmountOut is reversed, causing the slippage check to be performed on the wrong value. This is because the function swap904369BE returns amount0, amount1 so is the caller which should interpret which corresponds to token in and token out. This incorrect decoding leads to a situation where the slippage protection is not applied as intended, potentially exposing users to unexpected losses.

Impact

Users may receive fewer tokens than expected without the transaction reverting, leading to financial losses. This issue could be exploited by malicious actors to manipulate swap outcomes to their advantage.

Proof of Concept

1. A user calls swapOut5E08A399() or swapOutPermit23273373B() to swap token1 for token0.
2. The function executes the swap with zeroForOne set to false.
3. The swap is successful, returning the amounts swapped.
4. The slippage check is performed on swapAmountOut, which actually contains the input amount.
5. The user receives fewer tokens than expected without the transaction reverting.

Tools Used

Manual review

Recommended Mitigation Steps

Correct the decoding of swap results in both swapOut5E08A399() and swapOutPermit23273373B() functions.

Assessed type

Other

[af-afk]

fluidity-money/long.so@1e49a07