FIAT DAO veFDT contest - Bahurum's results

Unlock liquidity for your DeFi fixed income assets.

General Information

Platform: Code4rena

Start Date: 12/08/2022

Pot Size: $35,000 USDC

Total HM: 10

Participants: 126

Period: 3 days

Judge: Justin Goro

Total Solo HM: 3

Id: 154

League: ETH

FIAT DAO

Findings Distribution

Researcher Performance

Rank: 92/126

Findings: 1

Award: $30.34

🌟 Selected for report: 0

🚀 Solo Findings: 0

1. One step ownership transfer

In function transferOwnership owner is changed in a single step. Consider using a two step procedure to avoid the risk of losing contract ownership.

2. Critical consequences of unlock() function not explicitly stated

While the team confirmed that the unlock() function is intended to be used for migration, so it won't cause any issues, it would be better to state explicitly in natspec comment that it will break the escrow functionality and must only be used for migration.

3. Unused/redundant code:

  • Unused initial value of state variable decimals: State variable decimals is assigned in the constructor (L115).
  • If block at VotingEscrow.sol#L257-L259 is redundant since userPointHistory[_addr][uEpoch + 1] is always assigned afterwards at line 264.

4. Missing or incomplete natspec comments

5. Shadowed built in special variable block

In Blocklist.sol#L23 function block() shadows solidity built in special variable block.

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter