Platform: Code4rena
Start Date: 09/09/2022
Pot Size: $42,000 USDC
Total HM: 2
Participants: 101
Period: 3 days
Judge: hickuphh3
Total Solo HM: 2
Id: 161
League: ETH
Rank: 8/101
Findings: 1
Award: $81.81
🌟 Selected for report: 0
🚀 Solo Findings: 0
🌟 Selected for report: GalloDaSballo
Also found by: 0x040, 0x1f8b, 0x4non, 0x52, 0x85102, 0xNazgul, 0xSky, 0xSmartContract, Aymen0909, Bnke0x0, CertoraInc, Chandr, Chom, CodingNameKiki, Deivitto, Diana, Funen, JC, Jeiwan, Junnon, KIntern_NA, Lambda, Mohandes, Noah3o6, Ocean_Sky, Picodes, R2, Randyyy, RaymondFam, ReyAdmirado, Rohan16, Rolezn, Samatak, Sm4rty, SnowMan, SooYa, StevenL, Tagir2003, Tointer, TomJ, Tomo, V_B, Waze, _Adam, __141345__, a12jmx, ajtra, ak1, asutorufos, bharg4v, bobirichman, brgltd, c3phas, cccz, cryptonue, cryptostellar5, cryptphi, csanuragjain, d3e4, datapunk, delfin454000, dipp, djxploit, durianSausage, erictee, fatherOfBlocks, gogo, got_targ, hansfriese, horsefacts, hyh, ignacio, innertia, izhuer, karanctf, ladboy233, leosathya, lucacez, lukris02, mics, oyc_109, pashov, pauliax, prasantgupta52, rbserver, ret2basic, rfa, robee, rokinot, rotcivegaf, rvierdiiev, sach1r0, scaraven, sikorico, simon135, smiling_heretic, sorrynotsorry, unforgiven, wagmi, yixxas
81.8103 USDC - $81.81
hasNotSigned in RariMerkleRedeemer.signAndClaim()RariMerkleRedeemerYou are deploying RariMerkleRedeemer with merkleRoots, representing current state
But then new users can deposit funds to your pools. How can they get their money back? Should they wait before you will deploy another RariMerkleRedeemer with new state (merkleRoots)?
TribeRedeemer have the same decimals()Decimals for redeemedToken and each of tokensReceived may be different. It will break contract logic. So check it in constructor
TribeRedeemer are not address(0)amountInIf you will use deflationary token or fee token as a redeemedToken, your logic will fail
In TribeRedeemer.redeem() you are using amountIn to calculate previewRedeem()
But on your balance you may receive tokens less then amountIn