FEI and TRIBE Redemption contest - sorrynotsorry's results

A new DeFi primitive that allows any token to become productive and provide FEI liquidity at no cost to the markets that need it most.

General Information

Platform: Code4rena

Start Date: 09/09/2022

Pot Size: $42,000 USDC

Total HM: 2

Participants: 101

Period: 3 days

Judge: hickuphh3

Total Solo HM: 2

Id: 161

League: ETH

Tribe

Findings Distribution

Researcher Performance

Rank: 19/101

Findings: 1

Award: $34.50

🌟 Selected for report: 0

🚀 Solo Findings: 0

QA (LOW & NON-CRITICAL)

[L-01] Missing modifier in RariMerkleRedeemer.sol

While the functions signAndClaimAndRedeem, sign have hasNotSigned modifier, the function signAndClaim does not have this modifier.

[L-02] Redeeming in TribeRedeemer contract will throw panic when the redeemBase token amount is zero

The redeem function utilizes previewRedeem in order to calculate the redeemedToken amounts. However, it will panic if the redeemBase is zero.

        uint256 base = redeemBase;
        for (uint256 i = 0; i < tokensReceived.length; i++) {
            uint256 balance = IERC20(tokensReceived[i]).balanceOf(address(this));
            require(balance != 0, "ZERO_BALANCE");
            // @dev, this assumes all of `tokensReceived` and `redeemedToken`
            // have the same number of decimals
            uint256 redeemedAmount = (amountIn * balance) / base;

There can be a require statement implemented to avoid the panic: require(redeemBase != 0)

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter