Notional contest - 0x1f8b's results

Fixed rates, now in crypto.

General Information

Platform: Code4rena

Start Date: 27/01/2022

Pot Size: $75,000 USDC

Total HM: 10

Participants: 26

Period: 7 days

Judge: pauliax

Total Solo HM: 5

Id: 81

League: ETH

Notional

Findings Distribution

Researcher Performance

Rank: 19/26

Findings: 2

Award: $171.72

🌟 Selected for report: 0

🚀 Solo Findings: 0

External Links

Code4rena Contest Page Github Contest Repository Github Findings Repository Notional

Findings Information

🌟 Selected for report: cmichel

Also found by: 0x1f8b, TomFrenchBlockchain, UncleGrandpa925, WatchPug, defsec, leastwood, pauliax, sirhashalot

Labels

bug

duplicate

2 (Med Risk)

Awards

171.7186 USDC - $171.72

External Links

Link to GitHub issue

Handle

0x1f8b

Vulnerability details

Impact

Deprecated API stops working. Prices cannot be obtained. Protocol stops and contracts have to be redeployed.

Proof of Concept

The contracts use Chainlink’s deprecated API latestAnswer(). Such functions might suddenly stop working if Chainlink stopped supporting deprecated APIs.

Affected line:

contracts\utils\EIP1271Wallet.sol:176

Tools Used

Manual review.

Recommended Mitigation Steps

Use V3 interface functions: https://docs.chain.link/docs/price-feeds-api-reference/

#0 - jeffywu
2022-02-06T15:10:43Z

Duplicate #178

#1 - pauliax
2022-02-12T12:16:15Z

A duplicate of #197

Notional contest - 0x1f8b's results

Fixed rates, now in crypto.

General Information

Findings Distribution

Researcher Performance

External Links

[M-01] Use of deprecated Chainlink API - $171.72

Findings Information

Labels

Awards

External Links

Handle

Vulnerability details

Impact

Proof of Concept

Tools Used

Recommended Mitigation Steps

#0 - jeffywu2022-02-06T15:10:43Z

#1 - pauliax2022-02-12T12:16:15Z

#0 - jeffywu
2022-02-06T15:10:43Z

#1 - pauliax
2022-02-12T12:16:15Z