The Wildcat Protocol - lanrebayode77's results

Banking, but worse - a protocol for fixed-rate, undercollateralised credit facilities.

General Information

Platform: Code4rena

Start Date: 16/10/2023

Pot Size: $60,500 USDC

Total HM: 16

Participants: 131

Period: 10 days

Judge: 0xTheC0der

Total Solo HM: 3

Id: 296

League: ETH

Wildcat Protocol

Findings Distribution

Researcher Performance

Rank: 111/131

Findings: 1

Award: $0.06

🌟 Selected for report: 0

🚀 Solo Findings: 0

Lines of code

https://github.com/code-423n4/2023-10-wildcat/blob/c5df665f0bc2ca5df6f06938d66494b11e7bdada/src/market/WildcatMarket.sol#L142

Vulnerability details

Impact

When the need arises for Controller to close a market, it will be impossible as the controller contract does not have a method that makes a call to closeMarket() method inside of the market contract.

Proof of Concept

The WildcatMarket.closeMarket() is only callable by the controller.

function closeMarket() external onlyController nonReentrant {

However, the controller contract does not have the method that makes call to WildcatMarket.closeMarket() function.

Tools Used

Manual review.

In the Controller contract, include a methods that calls the closeMarket()

Assessed type

Error

#0 - c4-pre-sort

2023-10-27T07:03:32Z

minhquanym marked the issue as duplicate of #147

#1 - c4-judge

2023-11-07T13:58:21Z

MarioPoneder marked the issue as partial-50

#2 - c4-judge

2023-11-07T14:16:53Z

MarioPoneder changed the severity to 3 (High Risk)

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter