Trader Joe v2 contest - SEVEN's results

One-stop-shop decentralized trading on Avalanche.

General Information

Platform: Code4rena

Start Date: 14/10/2022

Pot Size: $100,000 USDC

Total HM: 12

Participants: 75

Period: 9 days

Judge: GalloDaSballo

Total Solo HM: 1

Id: 171

League: ETH

Trader Joe

Findings Distribution

Researcher Performance

Rank: 63/75

Findings: 1

Award: $0.16

🌟 Selected for report: 0

🚀 Solo Findings: 0

Findings Information

Awards

0.1634 USDC - $0.16

Labels

bug
3 (High Risk)
low quality report
partial-50
duplicate-299

External Links

Lines of code

https://github.com/code-423n4/2022-10-traderjoe/blob/main/src/LBToken.sol#L190-L195

Vulnerability details

Impact

When the sender is equal to the receiver, the asset can be inflated

Proof of Concept

address _from = address _to _fromBalance = _toBalance _balances[_id][_from] = _fromBalance - _amount; _balances[_id][_to] = _toBalance + _amount; will lead to inflated assets

Tools Used

vscode

#0 - Shungy

2022-10-25T22:02:38Z

I believe this finding to be technically valid.

It is duplicate of https://github.com/code-423n4/2022-10-traderjoe-findings/issues/266, but this report is of very low quality.

#1 - GalloDaSballo

2022-10-25T23:37:42Z

Needs more detail for High Severity

#2 - GalloDaSballo

2022-10-26T16:37:27Z

Checking for rules on partial duplicates

#3 - GalloDaSballo

2022-11-08T22:12:30Z

#4 - c4-judge

2022-11-14T13:57:29Z

GalloDaSballo marked the issue as duplicate of #299

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter