Popcorn contest - Kaysoft's results

A multi-chain regenerative yield-optimizing protocol.

General Information

Platform: Code4rena

Start Date: 31/01/2023

Pot Size: $90,500 USDC

Total HM: 47

Participants: 169

Period: 7 days

Judge: LSDan

Total Solo HM: 9

Id: 211

League: ETH

Popcorn

Findings Distribution

Researcher Performance

Rank: 153/169

Findings: 1

Award: $35.48

QA:
grade-b

🌟 Selected for report: 0

🚀 Solo Findings: 0

[L-01] AVOID FLOATING PRAGMA

Files: All Files

see: https://swcregistry.io/docs/SWC-103

[L-02] Use latest Solidity stable Pragma version

Files: All files

Recomended Mitigation Steps

Consider using version 0.8.17 instead of the version 0.8.15.

[NC-01] AVOID EMPTY BLOCKS

Avoid empty blocks or refactor the code so that empty blocks don't exist or emit an event. Files:

[NC-02] Some functions do not have NatSpec comments.

see: https://docs.soliditylang.org/en/v0.8.17/natspec-format.html

Files:

[NC-03] Implement the TODO in the AdapterBase.sol contract.

The AdapterBase.sol contract has a TODO comment and TODO is an indication of unfinished work

Recommendation mitigation steps

Consider impelementing the TODO

[NC-04] Use latest Openzeppelin library contract version.

File: package.json The project uses openzeppelin library version 4.8.0 and the latest openzeppelin/contract version is 4.8.1 It is always best practice to use the latest stable version of softwares as they will contain latest bugfixes and updates.

#0 - c4-judge

2023-02-28T15:03:41Z

dmvt marked the issue as grade-b

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter