Platform: Code4rena
Start Date: 23/09/2021
Pot Size: $50,000 USDC
Total HM: 5
Participants: 14
Period: 7 days
Judge: ghoulsol
Total Solo HM: 3
Id: 32
League: ETH
Rank: 4/14
Findings: 1
Award: $1,916.39
🌟 Selected for report: 2
🚀 Solo Findings: 0
594.7412 USDC - $594.74
tensors
Using approve() to manage allowances opens yourself and users of the token up to frontrunning. Best practice, but doesn't usually matter.
See also: https://github.com/0xProject/0x-monorepo/issues/850
I recommend using increase/decreaseAllowance instead.
🌟 Selected for report: tensors
1321.6472 USDC - $1,321.65
tensors
UniswapV3Oracle.sol is calling latestAnswer to get the last WETH price. This method will return the last value, but you won't be able to check if the data is fresh. On the other hand, calling the method latestRoundData() will instead allow you to run some extra validations, and check if the data is usuable.
#0 - talegift
2021-10-01T07:06:54Z
We'll fix this by removing dependence on ChainLink completely.