Vader Protocol contest - a_delamo's results

Capital efficient liquidity protocol

General Information

Platform: Code4rena

Start Date: 22/04/2021

Pot Size: $120,000 USDC

Total HM: 41

Participants: 10

Period: 7 days

Judge: LSDan

Total Solo HM: 28

Id: 5

League: ETH

Vader Protocol

Findings Distribution

Researcher Performance

Rank: 7/10

Findings: 6

Award: $3,034.83

🌟 Selected for report: 6

🚀 Solo Findings: 2

Findings Information

🌟 Selected for report: cmichel

Also found by: a_delamo, pauliax, shw

Labels

bug
duplicate
3 (High Risk)
filed

Awards

5.9395 VETH - $308.86

0.1425 ETH - $356.37

External Links

Handle

a_delamo

Vulnerability details

Here you have more info: https://gist.github.com/alexon1234/fc5600a8926944901ea58219c06b500e

#2 - dmvt

2021-05-26T22:23:23Z

duplicate of #208

Findings Information

🌟 Selected for report: a_delamo

Labels

bug
question
2 (Med Risk)

Awards

9.777 VETH - $508.40

0.2346 ETH - $586.62

External Links

Handle

a_delamo

Vulnerability details

Here you have more information: https://gist.github.com/alexon1234/e5038a9f66136ae210be692f8803d874

#0 - strictly-scarce

2021-05-01T13:17:22Z

Can't quite understand the assertion that a division is made before a multiply in the code outlined

uint _units = (((P * part1) + part2) / part3); return (_units * slipAdjustment) / one; // Divide by 10**18

_units will be 0 -> 2**256. slipAdjustment will be 0 -> 10**18 one is 10**18

// returns 0 return (0 * 10**18) / 10**18; return (2**256 * 0) / 10**18; return (<10**9 * <10**9) / 10**18; // returns non-zero return (>=10**9 * >=10**9) / 10**18;

Findings Information

🌟 Selected for report: pauliax

Also found by: 0xRajeev, a_delamo, s1m0

Labels

bug
duplicate
G (Gas Optimization)
addressed

Awards

0 VETH - $0.00

0.0116 ETH - $29.09

External Links

Handle

a_delamo

Vulnerability details

Here you have more info: https://gist.github.com/alexon1234/f19a020f9ff1b9aae66f3805a9c9ed61

#0 - 0xBrian

2021-05-11T06:10:10Z

Not sure when this was addressed, but it's fixed now.

#1 - dmvt

2021-05-26T21:06:32Z

duplicate of #304

Findings Information

🌟 Selected for report: JMukesh

Also found by: 0xRajeev, a_delamo, s1m0

Labels

bug
duplicate
G (Gas Optimization)
addressed

Awards

0 VETH - $0.00

0.0116 ETH - $29.09

External Links

Handle

a_delamo

Vulnerability details

Impact

In all the contracts we find most of the methods defined as public instead of external. Most of these methods are not being called from inside the contract, so could be defined as external and save some gas cost when being called.

Proof of Concept

https://github.com/crytic/slither/wiki/Detector-Documentation#public-function-that-could-be-declared-external

https://ethereum.stackexchange.com/questions/19380/external-vs-public-best-practices?answertab=active#tab-top

Tools Used

Slither

Just use external when possible in order to reduce the gas cost

#0 - 0xBrian

2021-05-11T04:37:35Z

#1 - dmvt

2021-05-26T21:15:57Z

duplicate of #14

Findings Information

🌟 Selected for report: a_delamo

Labels

bug
G (Gas Optimization)

Awards

0 VETH - $0.00

0.0638 ETH - $159.60

External Links

Handle

a_delamo

Vulnerability details

Here you have more information: https://gist.github.com/alexon1234/b101e3ac51bea3cbd9cf06f80eaa5bc2

Findings Information

🌟 Selected for report: a_delamo

Labels

bug
G (Gas Optimization)

Awards

0 VETH - $0.00

0.0638 ETH - $159.60

External Links

Handle

a_delamo

Vulnerability details

Here you have more info: https://gist.github.com/alexon1234/5e8f4c335899a3398808bb96203bb982

Findings Information

🌟 Selected for report: a_delamo

Labels

bug
G (Gas Optimization)
addressed

Awards

0 VETH - $0.00

0.0638 ETH - $159.60

External Links

Handle

a_delamo

Vulnerability details

Here you have more information: https://gist.github.com/alexon1234/5eb3fff3bded4e4c50d6e13abae6f474

Findings Information

🌟 Selected for report: a_delamo

Labels

bug
G (Gas Optimization)

Awards

0 VETH - $0.00

0.0638 ETH - $159.60

External Links

Handle

a_delamo

Vulnerability details

Here you have more information: https://gist.github.com/alexon1234/4e2686497af9febae1cbc4266ad76f55

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter