Volt Protocol contest - kyliek's results

Inflation Protected Stablecoin.

General Information

Platform: Code4rena

Start Date: 31/03/2022

Pot Size: $75,000 USDC

Total HM: 7

Participants: 42

Period: 7 days

Judge: Jack the Pug

Total Solo HM: 5

Id: 102

League: ETH

Volt Protocol

Findings Distribution

Researcher Performance

Rank: 26/42

Findings: 1

Award: $130.37

🌟 Selected for report: 0

🚀 Solo Findings: 0

Awards

130.3737 USDC - $130.37

Labels

bug
QA (Quality Assurance)

External Links

I didn't find any tests on logic related to CPI data arithmetic.

Low

Notes

[N1] unpinned solidity version

There are a few instances. One example is https://github.com/code-423n4/2022-03-volt/blob/f1210bf3151095e4d371c9e9d7682d9031860bbd/contracts/oracle/ScalingPriceOracle.sol#L2

[N2] public constants as getter in interface is unconventional

Constants that are in all cap letters are used as getters in the interface. https://github.com/code-423n4/2022-03-volt/blob/f1210bf3151095e4d371c9e9d7682d9031860bbd/contracts/oracle/IScalingPriceOracle.sol#L12

https://github.com/code-423n4/2022-03-volt/blob/f1210bf3151095e4d371c9e9d7682d9031860bbd/contracts/oracle/IScalingPriceOracle.sol#L17

It is not conventional to have all-cap functions. They should just be constants.

[N3] Use explicity return values instead of named returns

This is to make the code more readable. I see some number of instance. Here is one. https://github.com/code-423n4/2022-03-volt/blob/f1210bf3151095e4d371c9e9d7682d9031860bbd/contracts/oracle/OraclePassThrough.sol#L32-L42

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter