Crypto.com's flash loan products introduce significant attack vectors, particularly on L2 networks, with a high-risk score of 7/10. Critical findings include oracle manipulation via AMM sandwiching with potential losses over $200 million due to short TWAP windows on L2, and re-entrancy vulnerabilities in reward distribution and bridge finalization logic that could lead to token inflation or drains. The platform's existing mitigations are insufficient against these flash-loan-driven state manipulation techniques.
Read the full article at DEV Community
Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.



