Platform: Code4rena
Start Date: 31/03/2022
Pot Size: $75,000 USDC
Total HM: 7
Participants: 42
Period: 7 days
Judge: Jack the Pug
Total Solo HM: 5
Id: 102
League: ETH
Rank: 25/42
Findings: 1
Award: $148.99
🌟 Selected for report: 0
🚀 Solo Findings: 0
🌟 Selected for report: rayn
Also found by: 0xDjango, 0xkatana, 0xkowloon, BouSalman, CertoraInc, Dravee, Funen, Hawkeye, IllIllI, Jujic, Kenshin, Kthere, Meta0xNull, Sleepy, TerrierLover, async, aysha, berndartmueller, catchup, cccz, cmichel, csanuragjain, danb, defsec, georgypetrov, hake, hubble, kenta, kyliek, pauliax, rfa, robee, sahar, shenwilly, teryanarmen
148.9858 USDC - $148.99
In Vcon contract, using approve() to manage allowances opens yourself and users of the token up to frontrunning.
https://github.com/code-423n4/2022-03-volt/blob/main/contracts/vcon/Vcon.sol#L174-L189
None
Add increaseAllowance and decreaseAllowance methods in Vcon contract.