Platform: Code4rena
Start Date: 06/06/2023
Pot Size: $60,500 USDC
Total HM: 5
Participants: 50
Period: 8 days
Judge: gzeon
Id: 246
League: ETH
Rank: 33/50
Findings: 1
Award: $54.53
🌟 Selected for report: 0
🚀 Solo Findings: 0
🌟 Selected for report: libratus
Also found by: 0xcm, BRONZEDISC, Co0nan, Go-Langer, Madalad, MiniGlome, QiuhaoLi, T1MOH, Toshii, Udsen, ernestognw, flacko, joestakey, minhquanym, n1punp, rvierdiiev, sces60107
54.5276 USDC - $54.53
https://github.com/code-423n4/2023-06-llama/blob/main/src/LlamaExecutor.sol#L29-L35
Since the execute
function in LlamaExecutor.sol is not payable, nor the contract has the ability to receive ether, any action that requires sending ETH will eventually fail.
https://github.com/code-423n4/2023-06-llama/blob/main/src/LlamaExecutor.sol#L29-L35
Manual review
One of the mitigations that come up first to my mind is to make the LlamaExecutor.sol#execute function payable.
Payable
#0 - 0xSorryNotSorry
2023-06-18T15:57:57Z
The submission is not of a demonstrative quality but partly includes the primary issue.
#1 - c4-pre-sort
2023-06-19T11:11:50Z
0xSorryNotSorry marked the issue as duplicate of #255
#2 - c4-pre-sort
2023-06-19T11:13:37Z
0xSorryNotSorry marked the issue as not a duplicate
#3 - c4-pre-sort
2023-06-19T11:16:54Z
0xSorryNotSorry marked the issue as duplicate of #247
#4 - c4-judge
2023-07-02T10:31:37Z
gzeon-c4 marked the issue as satisfactory