Platform: Code4rena
Start Date: 07/08/2023
Pot Size: $36,500 USDC
Total HM: 11
Participants: 125
Period: 3 days
Judge: alcueca
Total Solo HM: 4
Id: 274
League: ETH
Rank: 71/125
Findings: 1
Award: $9.82
🌟 Selected for report: 0
🚀 Solo Findings: 0
🌟 Selected for report: RED-LOTUS-REACH
Also found by: 0x3b, 0x4non, 0xCiphky, 0xDING99YA, 0xDetermination, 0xE1, 0xG0P1, 0xStalin, 0xWaitress, 0xbrett8571, 0xhacksmithh, 0xkazim, 0xmuxyz, 0xweb3boy, 14si2o_Flint, AlexCzm, Alhakista, Bube, Bughunter101, Deekshith99, Eeyore, Giorgio, HChang26, InAllHonesty, JP_Courses, KmanOfficial, MatricksDeCoder, Mike_Bello90, MrPotatoMagic, Naubit, QiuhaoLi, RHaO-sec, Raihan, Rolezn, SUPERMAN_I4G, Shubham, Silverskrrrt, Strausses, T1MOH, Topmark, Tripathi, Watermelon, _eperezok, aakansha, auditsea, audityourcontracts, ayden, carlos__alegre, castle_chain, cducrest, ch0bu, d23e, deadrxsezzz, deth, devival, erebus, fatherOfBlocks, halden, hassan-truscova, hpsb, hunter_w3b, imkapadia, immeas, jat, kaden, kaveyjoe, klau5, koxuan, kutugu, ladboy233, lanrebayode77, leasowillow, lsaudit, markus_ether, matrix_0wl, merlin, nemveer, ni8mare, nonseodion, oakcobalt, owadez, p_crypt0, pipidu83, piyushshukla, popular00, ppetrov, rjs, sandy, sl1, supervrijdag, tay054, thekmj, wahedtalash77, windhustler, zhaojie
9.8204 USDC - $9.82
1.Not necessary to use nonReentrant
https://github.com/code-423n4/2023-08-verwa/tree/main/src/VotingEscrow.sol#L268
2.Should ensure _timestamp is greater than zero
https://github.com/code-423n4/2023-08-verwa/tree/main/src/LendingLedger.sol#L36#L39
modifier is_valid_epoch(uint256 _timestamp) { - require(_timestamp % WEEK == 0 || _timestamp == type(uint256).max, "Invalid timestamp"); + require( (_timestamp > 0 && _timestamp % WEEK == 0) || _timestamp == type(uint256).max, "Invalid timestamp"); _; }
3.msg.sender receive token can be marked as payable
https://github.com/code-423n4/2023-08-verwa/tree/main/src/LendingLedger.sol#L179
#0 - c4-judge
2023-08-22T14:10:24Z
alcueca marked the issue as grade-a