Dopex - mitko1111's results

A rebate system for option writers in the Dopex Protocol.

General Information

Platform: Code4rena

Start Date: 21/08/2023

Pot Size: $125,000 USDC

Total HM: 26

Participants: 189

Period: 16 days

Judge: GalloDaSballo

Total Solo HM: 3

Id: 278

League: ETH

Dopex

Findings Distribution

Researcher Performance

Rank: 125/189

Findings: 1

Award: $22.66

🌟 Selected for report: 0

🚀 Solo Findings: 0

Findings Information

Labels

bug
2 (Med Risk)
downgraded by judge
low quality report
partial-25
duplicate-1032

Awards

22.6576 USDC - $22.66

External Links

Lines of code

https://github.com/code-423n4/2023-08-dopex/blob/eb4d4a201b3a75dd4bddc74a34e9c42c71d0d12f/contracts/reLP/ReLPContract.sol#L286-L295

Vulnerability details

Impact

Adding liquidity also requires slippage protection. This comes from the fact that price cannot be changed when adding liquidity, thus liquidity providers also suffer from slippage.

Proof of Concept

Tools Used

VSCode

add dynamic variables that would be responsible for slippage protection

Assessed type

Uniswap

#0 - c4-pre-sort

2023-09-07T12:39:42Z

bytes032 marked the issue as duplicate of #1259

#1 - bytes032

2023-09-07T12:40:03Z

marking as LQ due to insufficient quality

#2 - c4-pre-sort

2023-09-07T12:40:09Z

bytes032 marked the issue as low quality report

#3 - c4-pre-sort

2023-09-11T07:53:26Z

bytes032 marked the issue as duplicate of #1032

#4 - c4-judge

2023-10-15T19:21:21Z

GalloDaSballo marked the issue as satisfactory

#5 - c4-judge

2023-10-21T07:52:01Z

GalloDaSballo marked the issue as not a duplicate

#6 - c4-judge

2023-10-21T07:52:17Z

GalloDaSballo marked the issue as duplicate of #1032

#7 - c4-judge

2023-10-21T07:52:27Z

GalloDaSballo changed the severity to 2 (Med Risk)

#8 - c4-judge

2023-10-21T07:52:32Z

GalloDaSballo marked the issue as partial-25

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter