Axelar Network contest - Tomio's results

Decentralized interoperability network.

General Information

Platform: Code4rena

Start Date: 07/04/2022

Pot Size: $50,000 USDC

Total HM: 5

Participants: 19

Period: 5 days

Judge: 0xean

Total Solo HM: 4

Id: 109

League: COSMOS

Axelar Network

Findings Distribution

Researcher Performance

Rank: 16/19

Findings: 1

Award: $87.24

🌟 Selected for report: 0

🚀 Solo Findings: 0

Findings Information

🌟 Selected for report: IllIllI

Also found by: 0v3rf10w, 0xNazgul, 0xkatana, CertoraInc, Chom, Dravee, Funen, Hawkeye, Tomio, ilan, nahnah, rayn, rfa

Labels

bug
G (Gas Optimization)

Awards

87.2351 USDC - $87.24

External Links

  1. Better increment

Proof of Concept: https://github.com/code-423n4/2022-04-axelar/blob/main/src/AdminMultisigBase.sol#L51 https://github.com/code-423n4/2022-04-axelar/blob/main/src/AdminMultisigBase.sol#L158

Recommended Mitigation Steps: change i++ to ++i

========================================================================

  1. Using immutable to declare a variable which set once at constructor

Proof of Concept: https://github.com/code-423n4/2022-04-axelar/blob/main/src/ERC20Permit.sol#L8

Recommended Mitigation Steps: add immutable

========================================================================

  1. Using < is cheaper than <=

Proof of Concept: https://github.com/code-423n4/2022-04-axelar/blob/main/src/ERC20Permit.sol#L44

Recommended Mitigation Steps: Change to <

========================================================================

#0 - deluca-mike

2022-04-20T08:08:43Z

  1. "Better increment" Confirmed.

  2. "Using immutable to declare a variable which set once at constructor" Confirmed.

  3. "Using < is cheaper than <=" Acknowledged, but a weird suggestion since < is not the same as <=. Sure, we could also increment the literal, but in any case, for readability, we will keep the literal and the comparator as it is. In any case, we'll change requires to if-reverts, so many of these comparators will be flipped.

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter