Juicebox contest - hansfriese's results

The decentralized fundraising and treasury protocol.

General Information

Platform: Code4rena

Start Date: 18/10/2022

Pot Size: $50,000 USDC

Total HM: 13

Participants: 67

Period: 5 days

Judge: Picodes

Total Solo HM: 7

Id: 172

League: ETH

Juicebox

Findings Distribution

Researcher Performance

Rank: 19/67

Findings: 1

Award: $342.00

QA:
grade-a

🌟 Selected for report: 0

🚀 Solo Findings: 0

[L-01] Wrong events

emit TierDelegateVotesChanged(_from, _oldValue, _newValue, _tierId, msg.sender);

It should be modified like below.

emit TierDelegateVotesChanged(_from, _tierId, _oldValue, _newValue, msg.sender);

[L-02] Incorrect pre-check condition

    if (
      _data.metadata.length > 36 && 
      bytes4(_data.metadata[32:36]) == type(IJB721Delegate).interfaceId
    ) {

4 bytes of interfaceId is saved from 32 to 36(exclusive) and it's enough to check if _data.metadata.length >= 36 instead of _data.metadata.length > 36.

[L-03] Immutable addresses should be 0-checked

[N-01] require()/revert() statements should have descriptive reason strings

    // Make the original un-initializable.
    require(address(this) != codeOrigin);
    // Stop re-initialization.
    require(address(store) == address(0));

#0 - c4-judge

2022-11-04T14:38:13Z

Picodes marked the issue as grade-a

#1 - Picodes

2022-11-04T14:38:18Z

1 is a nice catch, so grading A

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter