Forgotten Runes Warrior Guild contest - Dinddle's results

16,000 Warrior NFTs sold in a phased Dutch Auction.

General Information

Platform: Code4rena

Start Date: 03/05/2022

Pot Size: $30,000 USDC

Total HM: 6

Participants: 93

Period: 3 days

Judge: gzeon

Id: 118

League: ETH

Forgotten Runes

Findings Distribution

Researcher Performance

Rank: 31/93

Findings: 2

Award: $261.99

🌟 Selected for report: 0

🚀 Solo Findings: 0

Findings Information

🌟 Selected for report: Kulk0

Also found by: 0x1f8b, 0xDjango, BowTiedWardens, Dinddle, broccolirob, defsec, dirk_y, hyh, rajatbeladiya, throttle, unforgiven

Labels

bug
duplicate
2 (Med Risk)

Awards

246.5367 USDC - $246.54

External Links

Team Summon has no limit (Non-critical/low)

The teamSummon function has no limit to how many can be minted and can also do this at any time. This could lead to minting over the supply of 16,000 as stated by the distribution section on https://www.forgottenrunes.com/ja/warriors.

Recommendation: Require that count and the total minted supply do not exceed 16,000.

Affected lines of code:

https://github.com/code-423n4/2022-05-runes/blob/main/contracts/ForgottenRunesWarriorsMinter.sol#L257-L262

#0 - gzeoneth

2022-06-19T15:59:27Z

Duplicate of #104

Unchecked in for loop to save on a little gas:

In solidity 0.8.0 and above, it now checks underflows/overflows automatically. Because we know that the for loop is bounded and will never have the chance to do so, we can skip that check and save a little gas.

Example:

for (uint256 i = 0; i < 10; ) { // do something unchecked{ i++; } }

Affected lines of code:

https://github.com/code-423n4/2022-05-runes/blob/main/contracts/ForgottenRunesWarriorsMinter.sol#L162-L164

https://github.com/code-423n4/2022-05-runes/blob/main/contracts/ForgottenRunesWarriorsMinter.sol#L220-L222

https://github.com/code-423n4/2022-05-runes/blob/main/contracts/ForgottenRunesWarriorsMinter.sol#L259-L261

https://github.com/code-423n4/2022-05-runes/blob/main/contracts/ForgottenRunesWarriorsMinter.sol#L355-L357

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter