Canto Identity Subprotocols contest - viking71's results

Subprotocols for Canto Identity Protocol.

General Information

Platform: Code4rena

Start Date: 17/03/2023

Pot Size: $36,500 USDC

Total HM: 10

Participants: 98

Period: 3 days

Judge: leastwood

Total Solo HM: 5

Id: 223

League: ETH

Canto Identity Subprotocols

Findings Distribution

Researcher Performance

Rank: 92/98

Findings: 1

Award: $12.03

Gas:
grade-b

🌟 Selected for report: 0

🚀 Solo Findings: 0

1. _bio length check is incorrect in Bio.sol

Based on the given README, bio should be shorter than 200 characters not shorter than or equal to 200 characters. But the check in mint function is incorrect. Instead of bytes(_bio).length >= 200 it is bytes(_bio).length > 200.

Changing this will also save gas from 705 to 699 in mint function

Line Index

https://github.com/code-423n4/2023-03-canto-identity/blob/077372297fc419ea7688ab62cc3fd4e8f4e24e66/canto-bio-protocol/src/Bio.sol#L123

Recommendation

Change the if statement like below

if (bytes(_bio).length == 0 || bytes(_bio).length >= 200) revert InvalidBioLength(bytes(_bio).length);

#0 - 0xleastwood

2023-04-10T23:54:21Z

I guess this is technically correct.

#1 - c4-judge

2023-04-10T23:54:25Z

0xleastwood marked the issue as grade-b

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter