kiki_dev - UniV3SwapInput() Missing slippage protection

[sherlock-admin]

kiki_dev

high

UniV3SwapInput() Missing slippage protection

Summary

There is no slippage being enforced which allows any amount to be returned. The gives attackers the chance to steal funds from this transaction.

Vulnerability Detail

Because amountOutMinimum is hard coded to zero any value can be returned allowing these transactions to be sandwich attacked and allow an attack to steal most all funds.

Impact

Loss of funds

Code Snippet

https://github.com/sherlock-audit/2023-05-USSD/blob/main/ussd-contracts/contracts/USSD.sol#L237

Tool used

Manual Review

Recommendation

Have a dynamic amountOutMinimum value that lets the protocol or user(ideal) choose the acceptable amount out.

Duplicate of #673