ENS Contest - Jerry0x's results

Decentralised naming for web3

General Information

Platform: Code4rena

Start Date: 14/04/2023

Pot Size: $90,500 USDC

Total HM: 7

Participants: 59

Period: 14 days

Judge: LSDan

Total Solo HM: 3

Id: 232

League: ETH

ENS

Findings Distribution

Researcher Performance

Rank: 47/59

Findings: 1

Award: $59.79

QA:
grade-b

🌟 Selected for report: 0

🚀 Solo Findings: 0

Prevent array out of bounds

https://github.com/code-423n4/2023-04-ens/blob/main/contracts/dnssec-oracle/BytesUtils.sol#L179-L185 function readUint8( bytes memory self, uint256 idx ) internal pure returns (uint8 ret) { require(idx < self.length); return uint8(self[idx]); }

Ensure that the object being modified is correct

https://github.com/code-423n4/2023-04-ens/blob/main/contracts/dnssec-oracle/DNSSECImpl.sol#L64-#L67 function setAlgorithm(uint8 id, Algorithm newAlgo, Algorithm oldAlgo) public owner_only { require(newAlgo != oldAlgo); require(algorithms[id] == oldAlgo); algorithms[id] = newAlgo; emit AlgorithmUpdated(id, address(newAlgo)); } https://github.com/code-423n4/2023-04-ens/blob/main/contracts/dnssec-oracle/DNSSECImpl.sol#L75-#L78 function setDigest(uint8 id, Digest newDigest, Digest oldDigest) public owner_only { require(newDigest != oldDigest); require(digests[id] == oldDigest); digests[id] = newDigest; emit DigestUpdated(id, address(newDigest)); }

#0 - c4-judge

2023-05-09T09:40:20Z

dmvt marked the issue as grade-b

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter