Redacted Cartel contest - peritoflores's results

Complimentary subDAO for OlympusDAO.

General Information

Platform: Code4rena

Start Date: 15/02/2022

Pot Size: $30,000 USDC

Total HM: 18

Participants: 35

Period: 3 days

Judge: GalloDaSballo

Total Solo HM: 8

Id: 87

League: ETH

Redacted Cartel

Findings Distribution

Researcher Performance

Rank: 31/35

Findings: 1

Award: $63.66

🌟 Selected for report: 0

🚀 Solo Findings: 0

Awards

63.6553 USDC - $63.66

Labels

bug
QA (Quality Assurance)
sponsor confirmed

External Links

Missing Doc Comments in function getBrige()

The parameter round is missing in doc comments for the function getBrige() at TokemakBribe.sol

Also consider add doc comments at https://github.com/code-423n4/2022-02-redacted-cartel/blob/main/contracts/ThecosomataETH.sol

Doc comments will increase the readability of the code and will avoid other more high risk issues. For example in this contest I sent a medium severity issue related to the same parameter.

Poc

https://github.com/code-423n4/2022-02-redacted-cartel/blob/92c4d5810df7b9de15eae55dc7641c8b36cd799d/contracts/TokemakBribe.sol#L188-L204

@notice Get bribe from BribeVault @param proposal address Proposal @param token address Token @audit-issue need to add round parameter and all thecosomata eth @return bribeToken address Token address @return bribeAmount address Token address */ function getBribe( address proposal, uint256 round, address token ) external view returns (address bribeToken, uint256 bribeAmount) { return IBribeVault(bribeVault).getBribe( generateBribeVaultIdentifier(proposal, round, token) ); }

Similar issues

https://github.com/code-423n4/2021-09-swivel-findings/issues/71

#0 - GalloDaSballo

2022-02-27T00:16:40Z

Finding is valid and well documented, but report quantity pales in comparison to some other submissions

#1 - GalloDaSballo

2022-02-27T00:28:25Z

2/10

#2 - GalloDaSballo

2022-03-24T01:41:47Z

With the added #104 am bumping to 3/10

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter