Add mitigation

one-hundred-proof · Apr 17, 2023 · 3a5a50e · 3a5a50e
1 parent e4cb3e2
commit 3a5a50e
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/REPORT.md b/REPORT.md
@@ -52,6 +52,10 @@ For instance if you set `INITIAL_TOKEN0 = 500_000e18` and `TARGET_TICK = -50_000
 
 ## Risk Breakdown
 
-Difficulty to Exploit: Easy
-Weakness: Mathematical flaws, logic bugs
-CVSS2 Score: Critical
+- Difficulty to Exploit: Easy
+- Weakness: Mathematical flaws, logic bugs
+- CVSS2 Score: Critical
+
+## Recommended Mitigation
+
+Since the logic of this exploit is subtle there is no simple mitigation. At the very least is must be made impossible for the system to get in a state where `poolData.nearestCurrentTick < poolData.currentTick`.