Putty contest - aysha's results

An order-book based american options market for NFTs and ERC20s.

General Information

Platform: Code4rena

Start Date: 29/06/2022

Pot Size: $50,000 USDC

Total HM: 20

Participants: 133

Period: 5 days

Judge: hickuphh3

Total Solo HM: 1

Id: 142

League: ETH

Putty

Findings Distribution

Researcher Performance

Rank: 93/133

Findings: 1

Award: $47.13

🌟 Selected for report: 0

🚀 Solo Findings: 0

Title: Event is missing indexed fields

Impact

Each event should use three indexed fields if there are three or more fields

Proof of Concept

https://github.com/code-423n4/2022-06-putty/blob/3b6b844bc39e897bd0bbb69897f2deff12dc3893/contracts/src/PuttyV2.sol#L171-L207

Tools Used

Manual

Add Index to at least 3 parameters or existing ones in fewer cases.

Title: Insufficient Input Validation

Impact

The functions should first check if the passed arguments are valid first.

Proof of Concept

External functions that do not check the input values:

https://github.com/code-423n4/2022-06-putty/blob/3b6b844bc39e897bd0bbb69897f2deff12dc3893/contracts/src/PuttyV2.sol#L669 https://github.com/code-423n4/2022-06-putty/blob/3b6b844bc39e897bd0bbb69897f2deff12dc3893/contracts/src/PuttyV2.sol#L683

Tools Used

Manual

Check input values

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter