FEI and TRIBE Redemption contest - csanuragjain's results

A new DeFi primitive that allows any token to become productive and provide FEI liquidity at no cost to the markets that need it most.

General Information

Platform: Code4rena

Start Date: 09/09/2022

Pot Size: $42,000 USDC

Total HM: 2

Participants: 101

Period: 3 days

Judge: hickuphh3

Total Solo HM: 2

Id: 161

League: ETH

Tribe

Findings Distribution

Researcher Performance

Rank: 26/101

Findings: 1

Award: $34.50

🌟 Selected for report: 0

🚀 Solo Findings: 0

Zero address check missing

Contract: https://github.com/code-423n4/2022-09-tribe/blob/main/contracts/shutdown/redeem/TribeRedeemer.sol#L64

Issue: In redeem function, It is not checked whether "to" is address(0)

Recommendation: Add a check

require(to!=address(0), "Invalid address");

Missing modifier

Contract: https://github.com/code-423n4/2022-09-tribe/blob/main/contracts/shutdown/fuse/RariMerkleRedeemer.sol#L88

Issue: In signAndClaim function, hasNotSigned modifier is missing

Recommendation: Add modifier hasNotSigned in the signAndClaim function

Check missing on redeemedAmount

Contract: https://github.com/code-423n4/2022-09-tribe/blob/main/contracts/shutdown/redeem/TribeRedeemer.sol#L58

Issue: In previewRedeem function, redeemedAmount should always be lesser than total token balance

#0 - csanuragjain

2022-09-25T15:46:41Z

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter