Moonwell - twcctop's results

An open lending and borrowing DeFi protocol.

General Information

Platform: Code4rena

Start Date: 24/07/2023

Pot Size: $100,000 USDC

Total HM: 18

Participants: 73

Period: 7 days

Judge: alcueca

Total Solo HM: 8

Id: 267

League: ETH

Moonwell

Findings Distribution

Researcher Performance

Rank: 58/73

Findings: 1

Award: $44.88

QA:
grade-a

🌟 Selected for report: 0

🚀 Solo Findings: 0

https://github.com/code-423n4/2023-07-moonwell/blob/8694244ebf607a4ed33c0b74f422019fe8eb8d3e/src/core/MToken.sol#L1305-L1308

 totalReservesNew = totalReserves + actualAddAmount;

        /* Revert on overflow */
        require(totalReservesNew >= totalReserves, "add reserves unexpected overflow");

since actualAddAmount is uint , totalReservesNew >= totalReserves is always satisfied , which seems require unnecessary

#0 - alcueca

2023-08-11T22:27:51Z

solidity 0.8.17 has overflow protection, the code that this was forked from is obviously from a previous version in which SafeMath was not used.

#1 - c4-judge

2023-08-11T22:27:55Z

alcueca marked the issue as grade-a

#2 - c4-sponsor

2023-08-12T00:45:53Z

ElliotFriedman marked the issue as sponsor confirmed

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter