veToken Finance contest - ch13fd357r0y3r's results

Lock more veAsset permanently.

General Information

Platform: Code4rena

Start Date: 26/05/2022

Pot Size: $75,000 USDT

Total HM: 31

Participants: 71

Period: 7 days

Judge: GalloDaSballo

Total Solo HM: 18

Id: 126

League: ETH

veToken Finance

Findings Distribution

Researcher Performance

Rank: 22/71

Findings: 1

Award: $937.19

🌟 Selected for report: 0

🚀 Solo Findings: 0

External Links

Code4rena Contest Page Github Contest Repository Github Findings Repository veToken Finance

Findings Information

🌟 Selected for report: SmartSek

Also found by: ch13fd357r0y3r

Labels

bug

duplicate

2 (Med Risk)

disagree with severity

Awards

937.187 USDT - $937.19

External Links

Link to GitHub issue

Lines of code

https://github.com/code-423n4/2022-05-vetoken/blob/2d7cd1f6780a9bcc8387dea8fecfbd758462c152/contracts/VeTokenMinter.sol#L77

Vulnerability details

Impact

The Owner transfer all Vetokens to the desired address. This could be a Potential Rug

Proof of Concept

The Owner address simply calls the withdraw() function.

Tools Used

manual Analysis

#0 - jetbrain10
2022-06-15T15:36:03Z

All operator will be controlled by the DAO

#1 - GalloDaSballo
2022-07-24T23:55:42Z

Dup of #69

veToken Finance contest - ch13fd357r0y3r's results

Lock more veAsset permanently.

General Information

Findings Distribution

Researcher Performance

External Links

[M-01] Potential Rug Pull by Owner - $937.19

Findings Information

Labels

Awards

External Links

Lines of code

Vulnerability details

Impact

Proof of Concept

Tools Used

#0 - jetbrain102022-06-15T15:36:03Z

#1 - GalloDaSballo2022-07-24T23:55:42Z

#0 - jetbrain10
2022-06-15T15:36:03Z

#1 - GalloDaSballo
2022-07-24T23:55:42Z