Escher contest - simon135's results

A decentralized curated marketplace for editioned artwork.

General Information

Platform: Code4rena

Start Date: 06/12/2022

Pot Size: $36,500 USDC

Total HM: 16

Participants: 119

Period: 3 days

Judge: berndartmueller

Total Solo HM: 2

Id: 189

League: ETH

Escher

Findings Distribution

Researcher Performance

Rank: 106/119

Findings: 1

Award: $0.61

🌟 Selected for report: 0

🚀 Solo Findings: 0

Lines of code

https://github.com/code-423n4/2022-12-escher/blob/1e6414d4dac5a821ffa8adad571080f5f91dfbeb/src/minters/FixedPrice.sol#L109

Vulnerability details

Impact

if the fee receiver is a smart contract that goes above the 2300 gas limit then the owner won't be able to get their funds out and it can dos some users

Proof of Concept

ISaleFactory(factory).feeReceiver().transfer(address(this).balance / 20);

Tools Used

use call and just make sure there is no reentrancy risk

#0 - c4-judge

2022-12-10T12:07:41Z

berndartmueller marked the issue as duplicate of #99

#1 - c4-judge

2023-01-03T12:49:34Z

berndartmueller marked the issue as satisfactory

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter