Spectra - memforvik's results

A permissionless interest rate derivatives protocol on Ethereum.

General Information

Platform: Code4rena

Start Date: 23/02/2024

Pot Size: $36,500 USDC

Total HM: 2

Participants: 39

Period: 7 days

Judge: Dravee

Id: 338

League: ETH

Spectra

Findings Distribution

Researcher Performance

Rank: 35/39

Findings: 1

Award: $26.86

🌟 Selected for report: 0

🚀 Solo Findings: 0

Awards

26.8578 USDC - $26.86

Labels

bug
2 (Med Risk)
partial-25
sufficient quality report
upgraded by judge
duplicate-210

External Links

The implementation of function maxWithdraw does not comply with EIP Standard

according to eip-5059(https://eips.ethereum.org/EIPS/eip-5095), maxWithdraw MUST factor in both global and user-specific limits, like if withdrawals are entirely disabled (even temporarily) it MUST return 0 and MUST NOT revert.

function maxWithdraw(address owner) public view override whenNotPaused returns (uint256) { return convertToUnderlying(_maxBurnable(owner)); }

The above function will directly revert when the contract is paused. This logic does not comply with EIP-5059.

#0 - c4-pre-sort

2024-03-03T13:55:01Z

gzeon-c4 marked the issue as insufficient quality report

#1 - c4-pre-sort

2024-03-03T13:55:16Z

gzeon-c4 marked the issue as sufficient quality report

#2 - c4-judge

2024-03-11T01:46:48Z

JustDravee changed the severity to 2 (Med Risk)

#3 - c4-judge

2024-03-11T01:47:41Z

JustDravee marked the issue as duplicate of #210

#4 - c4-judge

2024-03-11T01:48:07Z

JustDravee marked the issue as satisfactory

#5 - c4-judge

2024-03-11T01:48:25Z

JustDravee marked the issue as partial-25

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter