Debt DAO contest - Satyam_Sharma's results

A cryptonative credit marketplace for fully anon and trustless loans to DAOs.

General Information

Platform: Code4rena

Start Date: 03/11/2022

Pot Size: $115,500 USDC

Total HM: 17

Participants: 120

Period: 7 days

Judge: LSDan

Total Solo HM: 1

Id: 174

League: ETH

Debt DAO

Findings Distribution

Researcher Performance

Rank: 119/120

Findings: 1

Award: $2.67

🌟 Selected for report: 0

🚀 Solo Findings: 0

Awards

2.6694 USDC - $2.67

Labels

bug
2 (Med Risk)
partial-50
duplicate-369

External Links

Lines of code

https://github.com/debtdao/Line-of-Credit/blob/audit/code4rena-2022-11-03/contracts/utils/LineLib.sol#L48

Vulnerability details

Our recommendation is to stop using transfer() in your code and switch to using call():

Impact: transfer() only forward 2300 gas which may break when gas cost change in a future ETH upgrade see: https://consensys.net/diligence/blog/2019/09/stop-using-soliditys-transfer-now/

Proof of concept:

payable(receiver).transfer(amount); https://github.com/debtdao/Line-of-Credit/blob/audit/code4rena-2022-11-03/contracts/utils/LineLib.sol#L48

Recommended Mitigation Steps: use call() instead

#0 - c4-judge

2022-11-15T21:04:42Z

dmvt marked the issue as duplicate of #14

#1 - c4-judge

2022-11-17T19:13:05Z

dmvt marked the issue as partial-50

#2 - C4-Staff

2022-12-20T05:56:43Z

liveactionllama marked the issue as duplicate of #369

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter