Infinity NFT Marketplace contest - sseefried's results

The world's most advanced NFT marketplace.

General Information

Platform: Code4rena

Start Date: 14/06/2022

Pot Size: $50,000 USDC

Total HM: 19

Participants: 99

Period: 5 days

Judge: HardlyDifficult

Total Solo HM: 4

Id: 136

League: ETH

Infinity NFT Marketplace

Findings Distribution

Researcher Performance

Rank: 78/99

Findings: 1

Award: $49.01

🌟 Selected for report: 0

🚀 Solo Findings: 0

QA Report

Non-critical: require in getRageQuitAmounts does nothing

Line 93 is

require(totalStaked >= 0, 'nothing staked to rage quit');

This will never fail since totalStaked is a uint256. It should be

require(totalStaked > 0, 'nothing staked to rage quit');

However, this bug has no effect on the rageQuit function. The user and the treasury would have 0 tokens transferred to them and an event RageQuit(msg.sender, 0, 0) would be emmitted which has no ill effects.

Low Risk: Add a zero check on destination for InfinityExchange.rescueETH

Functoin rescueETH should have an additional line:

function rescueETH(address destination) external payable onlyOwner {
  require(destination != address(0));
  (bool sent, ) = destination.call{value: msg.value}('');
  require(sent, 'failed');
}

One wouldn't want to accidentally send the ETH to nowhere.

#0 - HardlyDifficult

2022-07-11T00:12:10Z

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter