Frankencoin - kenta's results

A decentralized and fully collateralized stablecoin.

General Information

Platform: Code4rena

Start Date: 12/04/2023

Pot Size: $60,500 USDC

Total HM: 21

Participants: 199

Period: 7 days

Judge: hansfriese

Total Solo HM: 5

Id: 231

League: ETH

Frankencoin

Findings Distribution

Researcher Performance

Rank: 182/199

Findings: 1

Award: $0.07

🌟 Selected for report: 0

🚀 Solo Findings: 0

Lines of code

https://github.com/code-423n4/2023-04-frankencoin/blob/main/contracts/Equity.sol#L313

Vulnerability details

Impact

This function restructureCapTable can restructure the system by burning the balances. However, the loop does not work because the index of the array is set to 0. So the qualified can not restructure the system and the whole system must not work in a risky situation.

Proof of Concept

https://github.com/code-423n4/2023-04-frankencoin/blob/main/contracts/Equity.sol#L313

Tools Used

Line 313 must be like the following.

address current = addressesToWipe[0];

#0 - c4-pre-sort

2023-04-20T14:17:07Z

0xA5DF marked the issue as duplicate of #941

#1 - c4-judge

2023-05-18T14:24:49Z

hansfriese marked the issue as satisfactory

#2 - c4-judge

2023-05-18T14:32:26Z

hansfriese changed the severity to 2 (Med Risk)

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter