JPEG'd contest - joshie's results

Bridging the gap between DeFi and NFTs.

General Information

Platform: Code4rena

Start Date: 07/04/2022

Pot Size: $100,000 USDC

Total HM: 20

Participants: 62

Period: 7 days

Judge: LSDan

Total Solo HM: 11

Id: 107

League: ETH

JPEG'd

Findings Distribution

Researcher Performance

Rank: 62/62

Findings: 1

Award: $25.78

🌟 Selected for report: 0

🚀 Solo Findings: 0

External Links

Code4rena Contest Page Github Contest Repository Github Findings Repository JPEG'd

Findings Information

🌟 Selected for report: cccz

Also found by: 0xDjango, 0xkatana, Cr4ckM3, JMukesh, Jujic, Ruhum, WatchPug, berndartmueller, defsec, horsefacts, hyh, joshie, pedroais, peritoflores, rayn, reassor

Awards

25.7805 USDC - $25.78

Labels

bug

duplicate

2 (Med Risk)

External Links

Link to GitHub issue

Lines of code

https://github.com/code-423n4/2022-04-jpegd/blob/59e288c27e1ff1b47505fea2e5434a7577d85576/contracts/vaults/FungibleAssetVaultForDAO.sol#L105 https://github.com/code-423n4/2022-04-jpegd/blob/59e288c27e1ff1b47505fea2e5434a7577d85576/contracts/vaults/NFTVault.sol#L459

Vulnerability details

Impact

latestAnswer() is deprecated with the added risk that prices might be stale

Recommended Mitigation Steps

use latestRoundData() instead and make use of the extra arguments to validate

#0 - spaghettieth
2022-04-11T15:07:57Z

Duplicate of #4

JPEG'd contest - joshie's results

Bridging the gap between DeFi and NFTs.

General Information

Findings Distribution

Researcher Performance

External Links

[M-10] Oracle might be providing stale prices - $25.78

Findings Information

Awards

Labels

External Links

Lines of code

Vulnerability details

Impact

Recommended Mitigation Steps

#0 - spaghettieth2022-04-11T15:07:57Z

#0 - spaghettieth
2022-04-11T15:07:57Z