Platform: Code4rena
Start Date: 29/07/2022
Pot Size: $50,000 USDC
Total HM: 6
Participants: 75
Period: 5 days
Judge: GalloDaSballo
Total Solo HM: 3
Id: 149
League: ETH
Rank: 33/75
Findings: 2
Award: $88.03
🌟 Selected for report: 0
🚀 Solo Findings: 0
🌟 Selected for report: oyc_109
Also found by: 0x1f8b, 0x52, 0xNazgul, 0xSmartContract, 0xf15ers, 8olidity, Aymen0909, Bnke0x0, CertoraInc, Chom, CodingNameKiki, Deivitto, Dravee, ElKu, IllIllI, JC, Lambda, Noah3o6, NoamYakov, RedOneN, Respx, ReyAdmirado, Rohan16, Rolezn, Ruhum, Sm4rty, TomJ, Twpony, Waze, Yiko, __141345__, ajtra, apostle0x01, ashiq0x01, asutorufos, bardamu, benbaessler, berndartmueller, bharg4v, bulej93, c3phas, cccz, ch13fd357r0y3r, codexploder, cryptonue, cryptphi, defsec, djxploit, durianSausage, fatherOfBlocks, gogo, hansfriese, horsefacts, ignacio, kyteg, lucacez, mics, rbserver, robee, sashik_eth, simon135, sseefried, tofunmi, xiaoming90
56.1473 USDC - $56.15
If the intention is for the Ether to be used, the function should call another function, otherwise it should revert
File: DepositReceiver.sol DepositReceiver.sol#L29
Some tokens, such as Tether (USDT) return false rather than reverting if the approval fails. Use OpenZeppelin’s safeApprove(), which reverts if there’s a failure, instead.
File: AxelarDepositService.sol AxelarDepositService.sol#L30
File: ReceiverImplementation.sol ReceiverImplementation.sol#L38 ReceiverImplementation.sol#L64 ReceiverImplementation.sol#L86
#0 - re1ro
2022-08-05T04:10:07Z
Dup #3
#1 - GalloDaSballo
2022-09-01T00:45:54Z
Invalid as Deposit receiver needs that for WETH
Valid L
NC
1L 1NC
🌟 Selected for report: IllIllI
Also found by: 0x1f8b, 0xNazgul, 0xsam, 8olidity, Aymen0909, Bnke0x0, Chom, CodingNameKiki, Deivitto, Dravee, ElKu, Fitraldys, JC, Lambda, MiloTruck, Noah3o6, NoamYakov, RedOneN, Respx, ReyAdmirado, Rohan16, Rolezn, Ruhum, Sm4rty, TomJ, Tomio, Waze, __141345__, a12jmx, ajtra, ak1, apostle0x01, asutorufos, benbaessler, bharg4v, bulej93, c3phas, defsec, djxploit, durianSausage, erictee, fatherOfBlocks, gerdusx, gogo, kyteg, lucacez, medikko, mics, owenthurm, oyc_109, rbserver, robee, sashik_eth, simon135, tofunmi
31.8812 USDC - $31.88
File: AxelarGasService.sol AxelarGasService.sol#L120 AxelarGasService.sol#L136
File: AxelarGasService.sol AxelarGasService.sol#L123
File: AxelarDepositService.sol# AxelarDepositService.sol#L114 AxelarDepositService.sol#L168 AxelarDepositService.sol#L204
###[G-03] ++i costs less gas than i++, especially when it's use in for loops
File: AxelarGasService.sol AxelarGasService.sol#L123
File: AxelarDepositService.sol# AxelarDepositService.sol#L114 AxelarDepositService.sol#L168 AxelarDepositService.sol#L204
Use a solidity version of at least 0.8.10 to have external calls skip contract existence checks if the external call has a return value
FileAxelarDepositService.sol AxelarDepositService.sol#L16
File: AxelarDepositService.sol AxelarDepositService.sol#L165
#0 - re1ro
2022-08-05T04:09:40Z
Dup #2 and #3
#1 - GalloDaSballo
2022-08-23T01:03:21Z
Around 300 gas saved