~/talk

Price Manipulation Exploits

Talkat DeFi Security Summit 2022 · 2022-08-27..08-28· [security, smart-contracts]
links:none on file
slides:none on file

Describes building a lending protocol on Uniswap V2, then exploiting it by using flash loans and two accounts to borrow all LP tokens, redeposit them as collateral to exceed totalSupply, dump tokens into the pool to double LP price, and borrow profitably — a loop that enables profit despite using a time-weighted average price and the derived formula P = 2*sqrt(p0 p1 K)/totalSupply. Cites Cream Finance Oct 2021 and provides a CTF to reproduce the exploit.

AI-written summary · about

  1. 0:00Introduction to speaker
  2. 0:28Understanding price oracles
  3. 1:24UniSwap V2 fundamentals
  4. 3:21Building a lending protocol
  5. 5:02First price exploit
  6. 6:29Pricing LP tokens
  7. 7:51Advanced LP manipulation
  8. 10:40The LP token exploit cycle
  9. 15:36Lessons and future security
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.