Trader Joe v2 contest - adriro's results

One-stop-shop decentralized trading on Avalanche.

General Information

Platform: Code4rena

Start Date: 14/10/2022

Pot Size: $100,000 USDC

Total HM: 12

Participants: 75

Period: 9 days

Judge: GalloDaSballo

Total Solo HM: 1

Id: 171

League: ETH

Trader Joe

Findings Distribution

Researcher Performance

Rank: 25/75

Findings: 1

Award: $279.81

QA:
grade-b

🌟 Selected for report: 0

🚀 Solo Findings: 0

Findings Information

🌟 Selected for report: zzykxx

Also found by: 0x1f8b, 0xSmartContract, IllIllI, KingNFT, Rolezn, adriro, brgltd, hansfriese, pashov, rbserver

Labels

bug
QA (Quality Assurance)
sponsor confirmed
grade-b
Q-05

Awards

279.8109 USDC - $279.81

External Links

Unify bit access to variables

Packed variables are sometimes accessed using Decoder.decode and sometimes accessed by directly applying a mask and a shift.

binStep size should probably be 16 in LBPairInformation struct

The createLBPair function present in the factory takes the binStep argument as a uint16, which aligns also with packed size in the fee parameters and other uses.

However, the size for the binStep in the LBPairInformation is uint24.

burn function in LBPair should validate array lengths

The burn function receives two arrays that are iterated simultaneously and should have the same length. Consider adding a validation to ensure their lengths match.

#0 - GalloDaSballo

2022-11-09T17:15:51Z

Unify bit access to variables

R

binStep size should probably be 16 in LBPairInformation struct

R

## burn function in LBPair should validate array lengths R

Will give a bonus point but I think this is too short compared to some of the best

#1 - GalloDaSballo

2022-11-09T17:15:54Z

3R

#2 - c4-judge

2022-11-16T21:09:23Z

GalloDaSballo marked the issue as grade-b

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter