Maia DAO - Ulysses - Dinesh11G's results

Harnessing the power of Arbitrum, Ulysses Omnichain specializes in Virtualized Liquidity Management.

General Information

Platform: Code4rena

Start Date: 22/09/2023

Pot Size: $100,000 USDC

Total HM: 15

Participants: 175

Period: 14 days

Judge: alcueca

Total Solo HM: 4

Id: 287

League: ETH

Maia DAO

Findings Distribution

Researcher Performance

Rank: 153/175

Findings: 1

Award: $11.47

QA:
grade-b

🌟 Selected for report: 0

🚀 Solo Findings: 0

Title

Unused Return Value Warning in ArbitrumBranchBridgeAgent.sol

Impact

The warning indicates that the return value of a low-level call to _rootBridgeAgentAddress is not being used in the contract. While this warning is not an error, it suggests that the contract might not be handling potential errors or responses correctly when interacting with _rootBridgeAgentAddress. Ignoring return values from low-level calls can lead to unexpected behavior or vulnerabilities.

Proof of Concept

The warning is located in the following line of code in ArbitrumBranchBridgeAgent.sol: https://github.com/code-423n4/2023-09-maia/blob/main/src/ArbitrumBranchBridgeAgent.sol#L103

_rootBridgeAgentAddress.call{value: msg.value}("");

This code makes a low-level call to _rootBridgeAgentAddress, but the return value is not used or checked for errors.

Tools Used

code review

To address this warning and ensure proper error handling, you can modify the code as follows:

(bool success, ) = _rootBridgeAgentAddress.call{value: msg.value}("");
require(success, "Low-level call to _rootBridgeAgentAddress failed");

By checking the success variable and requiring that it's true, you ensure that the low-level call to _rootBridgeAgentAddress was successful. This helps prevent unexpected issues and improves the security of your contract.

#0 - c4-pre-sort

2023-10-15T13:26:32Z

0xA5DF marked the issue as sufficient quality report

#1 - c4-judge

2023-10-21T13:07:55Z

alcueca marked the issue as grade-b

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter