FEI and TRIBE Redemption contest - izhuer's results

A new DeFi primitive that allows any token to become productive and provide FEI liquidity at no cost to the markets that need it most.

General Information

Platform: Code4rena

Start Date: 09/09/2022

Pot Size: $42,000 USDC

Total HM: 2

Participants: 101

Period: 3 days

Judge: hickuphh3

Total Solo HM: 2

Id: 161

League: ETH

Tribe

Findings Distribution

Researcher Performance

Rank: 23/101

Findings: 1

Award: $34.50

🌟 Selected for report: 0

🚀 Solo Findings: 0

Locked Funds in RariMerkleRedeemer Contract

Without a migration function, funds in RariMerkleRedeemer may be locked. It is possible if a multiple of amountToDrip (in https://github.com/code-423n4/2022-09-tribe/blob/769b0586b4975270b669d7d1581aa5672d6999d5/contracts/shutdown/fuse/MerkleRedeemerDripper.sol#L18-L29) exceeds the total amount of redemption.

Locked Funds in TribeRedeemer Contract

Without a migration function, funds in TribeRedeemer may be locked. It is almost impossible to happen, but when someone invokes redeem(address to, uint256 amountIn) and specifies to as the address of TribeRedeemer, the funds will get locked.

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter