Forgotten Runes Warrior Guild contest - plotchy's results

16,000 Warrior NFTs sold in a phased Dutch Auction.

General Information

Platform: Code4rena

Start Date: 03/05/2022

Pot Size: $30,000 USDC

Total HM: 6

Participants: 93

Period: 3 days

Judge: gzeon

Id: 118

League: ETH

Forgotten Runes

Findings Distribution

Researcher Performance

Rank: 79/93

Findings: 1

Award: $30.28

🌟 Selected for report: 0

🚀 Solo Findings: 0

Be cautious when trusting gas estimation services for issueRefunds()

Trusting wallets to estimate gas on issueRefunds() is likely to fail. It's trivial to trick these services using any type of 'randomness'. See below for a simple example that will cause all major gas estimators to return a wrong estimate.

Lettting you know to save you from what could be failed refund transactions!

contract SneakyRefundee {

    fallback() external payable {
        if (block.number % 2 == 0) {
            revert();
        } else {
            while (gasleft() > uint(1000)) {}
            return;
        }
    }
}
AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter