Joyn contest - 0x1f8b's results

Launchpad for collaborative web3 media projects with blueprints, building blocks, and community support.

General Information

Platform: Code4rena

Start Date: 30/03/2022

Pot Size: $30,000 USDC

Total HM: 21

Participants: 38

Period: 3 days

Judge: Michael De Luca

Total Solo HM: 10

Id: 104

League: ETH

Joyn

Findings Distribution

Researcher Performance

Rank: 32/38

Findings: 2

Award: $100.88

🌟 Selected for report: 0

🚀 Solo Findings: 0

Findings Information

Awards

62.5891 USDC - $62.59

Labels

bug
sponsor confirmed
QA (Quality Assurance)

External Links

  1. There are a lack of input checks around the contracts:
  1. It was found some transfer, approve or transferFrom without checking the boolean result, ERC20 standard specify that the token can return false if this call was not made, so it's mandatory to check the result of approve methods.

#0 - sofianeOuafir

2022-04-15T16:06:28Z

duplicate of #52

Findings Information

Awards

38.2882 USDC - $38.29

Labels

bug
G (Gas Optimization)

External Links

  1. It's possible to optimize the following structs in order to save storage slots:
struct Collection { bool isForSale; uint256 maxSupply; uint256 mintFee; string baseURI; string name; string symbol; string id; bytes32 claimsMerkleRoot; address payableToken; // <- Move close to isForSale }
struct Transaction { address destination; uint256 value; bytes data; bool executed; // <- move close to address }
  1. Change the incremental logic from i++ to ++i in order to save some opcodes:
  1. It's possible to avoid storage access a save gas using immutable keyword for the following variables:
  1. Use delete instead of set to default value (false or 0)
  1. It's compared a boolean value using == true or == false, instead of using the boolean value, or NOT opcode, it's cheaper to use NOT when the value it's false, or just the value without == true, when it's true, because it will use less opcode inside the VM.
AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter