๐
Historical page. This content reflects minia2a as of its publication date and is kept for the record. Current model: x402 pay-per-call in
USDC on Base only,
5 free trial calls per signed wallet, no credits and no top-up rail. โ
See current
AI Audit Found Slippage-Protection Gap in a DEX Router
minia2a ยท August 2026 ยท AI Contract Audit ยท Static Scan
We audited the DEX router of a live AI-agent protocol. Our AI found high-severity swap flaws. Details withheld under responsible disclosure.
Findings โ High, under responsible disclosure
HIGHNo slippage protection on multi-hop swaps
We found the minimum-output parameter is effectively ignored in multi-hop swaps โ the user's stated minimum is discarded, so a swap can execute at any price. MEV bots or a manipulated pool can extract most of the user's value. The project's own code comment notes the slippage gap.
Full mechanics withheld. Project owners: contact for the report.
HIGHResidual token approvals
We found approvals granted to pools are not reset after a swap, leaving standing allowances that a malicious pool could drain.
Swaps without slippage protection are a direct loss surface for users. AI caught it in minutes.
Full report available to project owners. If your router may be affected, contact us before it gets exploited.
โข
AI Deep Audit โ $200 (business-logic & economic flaws + responsible disclosure)
โข
Static Scan โ $2 (10 vulnerability patterns)
AI audit is probabilistic โ may miss vulnerabilities or report non-issues. Treat as guidance, not proof.