Infinity NFT Marketplace contest - asutorufos's results

The world's most advanced NFT marketplace.

General Information

Platform: Code4rena

Start Date: 14/06/2022

Pot Size: $50,000 USDC

Total HM: 19

Participants: 99

Period: 5 days

Judge: HardlyDifficult

Total Solo HM: 4

Id: 136

League: ETH

Infinity NFT Marketplace

Findings Distribution

Researcher Performance

Rank: 66/99

Findings: 2

Award: $80.20

🌟 Selected for report: 0

πŸš€ Solo Findings: 0

Lines of code

https://github.com/code-423n4/2022-06-infinity/blob/main/contracts/core/InfinityExchange.sol#:~:text=weth%20%3D%20WETH%3B-,for%20(uint256%20i%20%3D%200%3B%20i%20%3C%20numSells%3B%20)%20%7B,)%3B,-unchecked%20%7B

Vulnerability details

Impact

When checking the executionValid fails in the middle of the iteration it could interrupt the whole matchOrders

Proof of Concept

[InfinityExchange.sol L#272-288]https://github.com/code-423n4/2022-06-infinity/blob/main/contracts/core/InfinityExchange.sol#:~:text=for%20(uint256%20i%20%3D%200%3B%20i%20%3C%20numSells,weth

Tools Used

Manuel Review

#0 - nneverlander

2022-06-22T16:28:04Z

Intentional

#1 - HardlyDifficult

2022-07-12T01:03:54Z

matchOrders could revert, but then the matching engine could remove the bad order and try again. Lowering risk and converting into a QA report for the warden.

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax Β© 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter