Llama - flacko's results

A governance system for onchain organizations.

General Information

Platform: Code4rena

Start Date: 06/06/2023

Pot Size: $60,500 USDC

Total HM: 5

Participants: 50

Period: 8 days

Judge: gzeon

Id: 246

League: ETH

Llama

Findings Distribution

Researcher Performance

Rank: 33/50

Findings: 1

Award: $54.53

🌟 Selected for report: 0

🚀 Solo Findings: 0

Findings Information

Awards

54.5276 USDC - $54.53

Labels

bug
2 (Med Risk)
satisfactory
duplicate-247

External Links

Lines of code

https://github.com/code-423n4/2023-06-llama/blob/main/src/LlamaExecutor.sol#L29-L35

Vulnerability details

Impact

Since the execute function in LlamaExecutor.sol is not payable, nor the contract has the ability to receive ether, any action that requires sending ETH will eventually fail.

Proof of Concept

https://github.com/code-423n4/2023-06-llama/blob/main/src/LlamaExecutor.sol#L29-L35

Tools Used

Manual review

One of the mitigations that come up first to my mind is to make the LlamaExecutor.sol#execute function payable.

Assessed type

Payable

#0 - 0xSorryNotSorry

2023-06-18T15:57:57Z

The submission is not of a demonstrative quality but partly includes the primary issue.

#1 - c4-pre-sort

2023-06-19T11:11:50Z

0xSorryNotSorry marked the issue as duplicate of #255

#2 - c4-pre-sort

2023-06-19T11:13:37Z

0xSorryNotSorry marked the issue as not a duplicate

#3 - c4-pre-sort

2023-06-19T11:16:54Z

0xSorryNotSorry marked the issue as duplicate of #247

#4 - c4-judge

2023-07-02T10:31:37Z

gzeon-c4 marked the issue as satisfactory

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter