Biconomy Hyphen 2.0 contest - 0xwags's results

Next-Gen Multichain Relayer Protocol.

General Information

Platform: Code4rena

Start Date: 10/03/2022

Pot Size: $75,000 USDT

Total HM: 25

Participants: 54

Period: 7 days

Judge: pauliax

Total Solo HM: 10

Id: 97

League: ETH

Biconomy

Findings Distribution

Researcher Performance

Rank: 41/54

Findings: 2

Award: $179.09

🌟 Selected for report: 0

🚀 Solo Findings: 0

Awards

119.6037 USDT - $119.60

Labels

bug
QA (Quality Assurance)

External Links

#0 - CloudEllie

2022-03-19T21:56:18Z

Warden 0xwags submitted a request March 17 that the following section be withdrawn from this QA report:

The import below is not amongst the hyphen contracts :

https://github.com/code-423n4/2022-03-biconomy/blob/04751283f85c9fc94fb644ff2b489ec339cd9ffc/contracts/hyphen/token/LPToken.sol#L10

consider importing directly from the OZ contracts.

They commented: "The sponsor confirmed that it was an npm import hours after I submitted."

Deferring to the judge as to whether this context should have been clear from the available documentation.

#1 - pauliax

2022-05-09T13:13:06Z

Warden 0xwags submitted a request March 17 that the following section be withdrawn from this QA report:

The import below is not amongst the hyphen contracts : https://github.com/code-423n4/2022-03-biconomy/blob/04751283f85c9fc94fb644ff2b489ec339cd9ffc/contracts/hyphen/token/LPToken.sol#L10 consider importing directly from the OZ contracts.

They commented: "The sponsor confirmed that it was an npm import hours after I submitted."

Deferring to the judge as to whether this context should have been clear from the available documentation.

I will still consider this as a non-critical issue when evaluating the score.

Awards

59.4896 USDT - $59.49

Labels

bug
G (Gas Optimization)

External Links

Use unchecked block:

https://github.com/code-423n4/2022-03-biconomy/blob/db8a1fdddd02e8cc209a4c73ffbb3de210e4a81a/contracts/hyphen/LiquidityPool.sol#L179

Since the line prior to the aforementioned checks that currentLiquidity is the smaller operand of the two , you can use the unchecked block as it will not lead to an underflow.

Unnecessary initialisation of default values.

The lowest value represented by uint256 is 0,so no need to assign it:

https://github.com/code-423n4/2022-03-biconomy/blob/04751283f85c9fc94fb644ff2b489ec339cd9ffc/contracts/hyphen/WhitelistPeriodManager.sol#L180

https://github.com/code-423n4/2022-03-biconomy/blob/04751283f85c9fc94fb644ff2b489ec339cd9ffc/contracts/hyphen/WhitelistPeriodManager.sol#L228

https://github.com/code-423n4/2022-03-biconomy/blob/04751283f85c9fc94fb644ff2b489ec339cd9ffc/contracts/hyphen/WhitelistPeriodManager.sol#L247

https://github.com/code-423n4/2022-03-biconomy/blob/04751283f85c9fc94fb644ff2b489ec339cd9ffc/contracts/hyphen/ExecutorManager.sol#L47

https://github.com/code-423n4/2022-03-biconomy/blob/04751283f85c9fc94fb644ff2b489ec339cd9ffc/contracts/hyphen/LiquidityFarming.sol#L233

https://github.com/code-423n4/2022-03-biconomy/blob/04751283f85c9fc94fb644ff2b489ec339cd9ffc/contracts/hyphen/LiquidityFarming.sol#L266

https://github.com/code-423n4/2022-03-biconomy/blob/04751283f85c9fc94fb644ff2b489ec339cd9ffc/contracts/hyphen/token/TokenManager.sol#L78

https://github.com/code-423n4/2022-03-biconomy/blob/04751283f85c9fc94fb644ff2b489ec339cd9ffc/contracts/hyphen/token/LPToken.sol#L77

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter