Swivel v3 contest - Junnon's results

The Capital-Efficient Protocol For Fixed-Rate Lending.

General Information

Platform: Code4rena

Start Date: 12/07/2022

Pot Size: $35,000 USDC

Total HM: 13

Participants: 78

Period: 3 days

Judge: 0xean

Total Solo HM: 6

Id: 135

League: ETH

Swivel

Findings Distribution

Researcher Performance

Rank: 63/78

Findings: 1

Award: $44.26

🌟 Selected for report: 0

🚀 Solo Findings: 0

Mathematical Incorrect in ZcToken.sol make redeem and withdraw function unoperateable if holder != msg.sender

code Line: https://github.com/code-423n4/2022-07-swivel/blob/daf72892d8a8d6eaa43b9e7d1924ccb0e612ee3c/Creator/ZcToken.sol#L111-L117

https://github.com/code-423n4/2022-07-swivel/blob/daf72892d8a8d6eaa43b9e7d1924ccb0e612ee3c/Creator/ZcToken.sol#L132-L135

since if (allowed >= principalAmount) { revert Approvals(allowed, principalAmount); } will revert when allowance[holder][msg.sender] larger than principalAmount but under the next line theres allowance[holder][msg.sender] -= principalAmount; that will cause underflow (revert since compiler 0.8.0).

#0 - robrobbins

2022-08-31T00:06:51Z

addressed in other tickets

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter