Coinbase Smart Wallet - Hajime's results

Smart Wallet from Coinbase Wallet

General Information

Platform: Code4rena

Start Date: 14/03/2024

Pot Size: $49,000 USDC

Total HM: 3

Participants: 51

Period: 7 days

Judge: 3docSec

Id: 350

League: ETH

Coinbase

Findings Distribution

Researcher Performance

Rank: 47/51

Findings: 1

Award: $13.69

🌟 Selected for report: 0

🚀 Solo Findings: 0

Findings Information

🌟 Selected for report: K42

Also found by: 0x11singh99, 0xAnah, Hajime, SAQ, SM3_SS, albahaca, clara, dharma09, hunter_w3b, naman1778, shamsulhaq123, slvDev

Labels

bug
downgraded by judge
G (Gas Optimization)
grade-b
insufficient quality report
primary issue
G-12

Awards

13.6948 USDC - $13.69

External Links

Lines of code

https://github.com/code-423n4/2024-03-coinbase/blob/e0573369b865d47fed778de00a7b6df65ab1744e/src/SmartWallet/CoinbaseSmartWallet.sol#L208-L210

Vulnerability details

Impact

The new optimization in v0.8.22 removes the need for poor unchecked increment patterns in for loop bodies such

Proof of Concept

Solidity 0.8.22 introduces an overflow check optimization that automatically generates an unchecked arithmetic increment of the counter of for loops.

Tools Used

manual

do not use ++i in >v0.8.22

Assessed type

Other

#0 - c4-pre-sort

2024-03-22T03:04:55Z

raymondfam marked the issue as insufficient quality report

#1 - c4-pre-sort

2024-03-22T03:05:00Z

raymondfam marked the issue as primary issue

#2 - raymondfam

2024-03-22T03:05:36Z

It's meant for gas optimization.

#3 - 3docSec

2024-03-27T10:04:47Z

The lookout made a good point.

#4 - c4-judge

2024-03-27T10:04:56Z

3docSec changed the severity to G (Gas Optimization)

#5 - c4-judge

2024-03-27T10:05:06Z

3docSec marked the issue as grade-b

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter