Asymmetry contest - ad3sh_'s results

A protocol to help diversify and decentralize liquid staking derivatives.

General Information

Platform: Code4rena

Start Date: 24/03/2023

Pot Size: $49,200 USDC

Total HM: 20

Participants: 246

Period: 6 days

Judge: Picodes

Total Solo HM: 1

Id: 226

League: ETH

Asymmetry Finance

Findings Distribution

Researcher Performance

Rank: 230/246

Findings: 1

Award: $2.27

🌟 Selected for report: 0

🚀 Solo Findings: 0

Awards

2.2713 USDC - $2.27

Labels

bug
3 (High Risk)
low quality report
partial-50
sponsor confirmed
upgraded by judge
duplicate-588

External Links

Lines of code

https://github.com/code-423n4/2023-03-asymmetry/blob/main/contracts/SafEth/derivatives/WstEth.sol#L86

Vulnerability details

Impact

The function returns the price of WstETH in terms of stETH. The underlying token which we desire is ETH. Since stETH does not have the same value as WETH the output price incorrect.

Proof of Concept

function ethPerDerivative(uint256 _amount) public view returns (uint256) { return IWStETH(WST_ETH).getStETHByWstETH(10 ** 18); }

Tools Used

Manual review

Add extra steps to approximate the rate for converting stETH to ETH.

#0 - c4-pre-sort

2023-04-01T13:54:09Z

0xSorryNotSorry marked the issue as low quality report

#1 - c4-sponsor

2023-04-07T22:31:36Z

elmutt marked the issue as sponsor confirmed

#2 - c4-judge

2023-04-23T11:03:01Z

Picodes marked the issue as duplicate of #588

#3 - c4-judge

2023-04-23T11:03:09Z

Picodes changed the severity to 3 (High Risk)

#4 - c4-judge

2023-04-23T11:03:20Z

Picodes marked the issue as partial-50

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter