Putty contest - GimelSec's results

An order-book based american options market for NFTs and ERC20s.

General Information

Platform: Code4rena

Start Date: 29/06/2022

Pot Size: $50,000 USDC

Total HM: 20

Participants: 133

Period: 5 days

Judge: hickuphh3

Total Solo HM: 1

Id: 142

League: ETH

Putty

Findings Distribution

Researcher Performance

Rank: 91/133

Findings: 1

Award: $47.15

🌟 Selected for report: 0

🚀 Solo Findings: 0

(Low) Users can call cancel after fillorder.

Impact

It's impossible to cancel orders after calling fillorder, but users can call the cancel function after fulfilling orders, which is confusing. Also, it's hard for external accounts to check the order state. It may also confuse users who want to check values of cancelledOrders.

Proof of Concept

https://github.com/code-423n4/2022-06-putty/blob/main/contracts/src/PuttyV2.sol#L143 https://github.com/code-423n4/2022-06-putty/blob/main/contracts/src/PuttyV2.sol#L526

Tools Used

None

Maintain order states, or check states in cancel.

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter