yAxis contest - hack3r-0m's results

The trusted #DeFi platform to earn reliable returns on digital assets.

General Information

Platform: Code4rena

Start Date: 16/11/2021

Pot Size: $30,000 USDC

Total HM: 3

Participants: 18

Period: 3 days

Judge: leastwood

Total Solo HM: 2

Id: 56

League: ETH

yAxis

Findings Distribution

Researcher Performance

Rank: 16/18

Findings: 1

Award: $29.93

🌟 Selected for report: 1

🚀 Solo Findings: 0

External Links

Code4rena Contest Page Github Contest Repository Github Findings Repository yAxis

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Auditors

Browse

Contests

Browse

Get in touch

Contact Twitter

Findings Information

🌟 Selected for report: hack3r-0m

Also found by: defsec

Labels

bug

G (Gas Optimization)

sponsor acknowledged

fix later

Awards

21.2967 USDC - $21.30

External Links

Link to GitHub issue

Handle

hack3r-0m

Vulnerability details

following functions can be marked external:

setTransmutationPeriod
stake
forceTransmute
exit
transmuteAndClaim
transmuteClaimAndWithdraw
distribute
userInfo
getMultipleUserInfo
bufferInfo

Findings Information

🌟 Selected for report: xxxxx

Also found by: TimmyToes, hack3r-0m, pauliax

Labels

bug

duplicate

G (Gas Optimization)

Awards

8.6252 USDC - $8.63

External Links

Link to GitHub issue

Handle

hack3r-0m

Vulnerability details

https://github.com/code-423n4/2021-11-yaxis/blob/main/contracts/v3/alchemix/Alchemist.sol#L757-L759

can be restricted to view as it does not modify the state

#0 - Xuefeng-Zhu
2021-11-22T18:06:03Z

The function is not used and will be removed

#1 - Xuefeng-Zhu
2021-12-09T06:53:33Z

https://github.com/code-423n4/2021-11-yaxis-findings/issues/96

yAxis contest - hack3r-0m's results

The trusted #DeFi platform to earn reliable returns on digital assets.

General Information

Findings Distribution

Researcher Performance

External Links

Gas Report - $29.93

Gas Report - $29.93

🌟 [G-13] several functions can be marked external - $21.30

Findings Information

Labels

Awards

External Links

Handle

Vulnerability details

[G-31] `_expectCaller` mutability can be restricted to view - $8.63

Findings Information

Labels

Awards

External Links

Handle

Vulnerability details

#0 - Xuefeng-Zhu2021-11-22T18:06:03Z

#1 - Xuefeng-Zhu2021-12-09T06:53:33Z

#0 - Xuefeng-Zhu
2021-11-22T18:06:03Z

#1 - Xuefeng-Zhu
2021-12-09T06:53:33Z