Art Gobblers contest - Funen's results

Experimental Decentralized Art Factory By Justin Roiland and Paradigm.

General Information

Platform: Code4rena

Start Date: 20/09/2022

Pot Size: $100,000 USDC

Total HM: 4

Participants: 109

Period: 7 days

Judge: GalloDaSballo

Id: 163

League: ETH

Art Gobblers

Findings Distribution

Researcher Performance

Rank: 57/109

Findings: 1

Award: $55.20

🌟 Selected for report: 0

🚀 Solo Findings: 0

  1. User can't got their Remaining Legendary Gobblers

https://github.com/code-423n4/2022-09-artgobblers/blob/d2087c5a8a6a4f1b9784520e7fe75afa3a9cbdbe/src/ArtGobblers.sol#L415

the only way to set them to got their max number of remaining legendary gobblers by set gobblerId >= MAX_SUPPLY to ensure that NoRemainingLegendaryGobblers() so if the Max_Supply was reach it it would revert immediately.

  1. Innacurate Imported file

Files :

1.) https://github.com/code-423n4/2022-09-artgobblers/blob/d2087c5a8a6a4f1b9784520e7fe75afa3a9cbdbe/src/ArtGobblers.sol#L62-L71

Checked if some of file directory has changed/innacurate/it can't found so it should better to change and u must update them and adding/import some contract to avoid running/error :

import {Owned} from "solmate/auth/Owned.sol"; //@audit import {ERC721} from "solmate/tokens/ERC721.sol"; //@audit import {LibString} from "solmate/utils/LibString.sol"; //@audit import {MerkleProofLib} from "solmate/utils/MerkleProofLib.sol"; //@audit import {FixedPointMathLib} from "solmate/utils/FixedPointMathLib.sol"; //@audit import {ERC1155, ERC1155TokenReceiver} from "solmate/tokens/ERC1155.sol"; //@audit import {toWadUnsafe, toDaysWadUnsafe} from "solmate/utils/SignedWadMath.sol"; //@audit lib/solmate/src/utils/SignedWadMath.sol; import {LibGOO} from "goo-issuance/LibGOO.sol"; //@audit import {LibGOO} from "lib/goo-issuance/src/LibGOO.sol"; import {LogisticVRGDA} from "VRGDAs/LogisticVRGDA.sol"; //@audit import {LogisticVRGDA} from "lib/VRGDAs/src/LogisticVRGDA.sol";

Make sure that directory of each one of contract was correct

2.) https://github.com/code-423n4/2022-09-artgobblers/blob/d2087c5a8a6a4f1b9784520e7fe75afa3a9cbdbe/src/Goo.sol#L4

import {ERC20} from "lib/solmate/src/tokens/ERC20.sol";
  1. The contract name was innacurate

https://github.com/code-423n4/2022-09-artgobblers/blob/main/script/deploy/DeployBase.s.sol

It should be DeployBase.sol rather than DeployBase.s.sol (since it was quote on contract)

Same Case :

https://github.com/code-423n4/2022-09-artgobblers/blob/main/script/deploy/DeployRinkeby.s.sol

DeployRinkeby.sol

  1. Locked Pragma Compiler

File :

1.) https://github.com/code-423n4/2022-09-artgobblers/blob/main/src/ArtGobblers.sol 2.) https://github.com/code-423n4/2022-09-artgobblers/blob/main/src/utils/GobblerReserve.sol

Since it was used >=0.8.0. As the compiler can be use for example 0.8.14 and consider locking at this version the same as another. It can be consider using locking the pragma version whenever possible and avoid using a floating pragma in the final deployment. Since it can be problematic, if there are publicly disclosed bugs and issues that affect the current compiler version used.

#0 - GalloDaSballo

2022-10-06T00:13:07Z

User can't got their Remaining Legendary Gobblers

Disagree, next time consider writing a coded POC and submitting as Med

Innacurate Imported file

Disputed, these are Foundry defaults

The contract name was innacurate

Doesnt' look valid

Locked Pragma Compiler

NC

I recommend coding to demonstrate the reports to avoid confusion

1 NC

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter