POPA Reconthere is another Idea about Arrakis incident:
there is another Idea about Arrakis incident: The attacker stole the unclaimed LP fees with a "sandwich" attack The mint and redeem functions both require the input and output to be proportional to the deposited LP + unclaimed fees + idle balance in the two tokens. That means, if the pool holds x:y of token A:token B (in the LP position, plus fees and idle balance), your input/output will also be proportional to x:y. Thus, you cannot manipulate the price to fool the vault when burn() is called, the fees are collected. These fees are then compounded into the pool. This creates the vulnerabili…
The excerpt is quoted from a public Telegram channel, which owns its text.