Backed Protocol contest - Meta0xNull's results

Protocol for peer to peer NFT-Backed Loans.

General Information

Platform: Code4rena

Start Date: 05/04/2022

Pot Size: $30,000 USDC

Total HM: 10

Participants: 47

Period: 3 days

Judge: gzeon

Total Solo HM: 4

Id: 106

League: ETH

Backed Protocol

Findings Distribution

Researcher Performance

Rank: 32/47

Findings: 2

Award: $84.80

🌟 Selected for report: 0

🚀 Solo Findings: 0

Awards

51.8678 USDC - $51.87

Labels

bug
QA (Quality Assurance)
sponsor acknowledged

External Links

1) Suggest updateRequiredImprovementRate() Set a Max Limit

Risk Level: Non Critical

Impact

Improvement rate over 100%/300% will not make sense. While I believe the team will not set a crazy ImprovementRate but we can't predict when there is new team or DAO who take over.

Proof of Concept

https://github.com/code-423n4/2022-04-backed/blob/main/contracts/NFTLoanFacilitator.sol#L320-L325

Hard Coded Max Limit in updateRequiredImprovementRate().

#0 - wilsoncusack

2022-04-07T12:17:29Z

Currently we plan to allow the DAO to do whatever it wants

Awards

32.9299 USDC - $32.93

Labels

bug
G (Gas Optimization)
sponsor acknowledged

External Links

1) Long Revert Strings are Waste of Gas

Impact

Shortening revert strings to fit in 32 bytes will decrease deployment time gas and will decrease runtime gas when the revert condition has been met.

Revert strings that are longer than 32 bytes require at least one additional mstore, along with additional overhead for computing memory offset, etc.

Proof of Concept

https://github.com/code-423n4/2022-04-backed/blob/main/contracts/NFTLoanFacilitator.sol#L118 https://github.com/code-423n4/2022-04-backed/blob/main/contracts/NFTLoanFacilitator.sol#L178 https://github.com/code-423n4/2022-04-backed/blob/main/contracts/NFTLoanFacilitator.sol#L255 More...

Shorten the revert strings to fit in 32 bytes.

Or consider using Custom Errors (solc >=0.8.4).

#0 - wilsoncusack

2022-04-07T12:16:56Z

duplicate of many others, do not plan to change

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter