Trader Joe v2 contest - wagmi's results

One-stop-shop decentralized trading on Avalanche.

General Information

Platform: Code4rena

Start Date: 14/10/2022

Pot Size: $100,000 USDC

Total HM: 12

Participants: 75

Period: 9 days

Judge: GalloDaSballo

Total Solo HM: 1

Id: 171

League: ETH

Trader Joe

Findings Distribution

Researcher Performance

Rank: 70/75

Findings: 1

Award: $0.01

🌟 Selected for report: 0

🚀 Solo Findings: 0

Awards

0.006 USDC - $0.01

Labels

2 (Med Risk)
satisfactory
duplicate-139

External Links

Judge has assessed an item in Issue #403 as M risk. The relevant finding follows:

  1. No upper limit check on flash loan fee No upper limit check on setFlashLoanFee(). Although only admin can set this, human error can lead to higher percente swap, leading to excess swap and gas fee. Or admin can rug pull users by front-running flash loan transaction and setting unreasonable high fee.

function setFlashLoanFee(uint256 _flashLoanFee) external override onlyOwner { uint256 _oldFlashLoanFee = flashLoanFee;

if (_oldFlashLoanFee == _flashLoanFee) revert LBFactory__SameFlashLoanFee(_flashLoanFee); flashLoanFee = _flashLoanFee; emit FlashLoanFeeSet(_oldFlashLoanFee, _flashLoanFee);

} https://github.com/code-423n4/2022-10-traderjoe/blob/79f25d48b907f9d0379dd803fc2abc9c5f57db93/src/LBFactory.sol#L474-L481

#0 - c4-judge

2022-11-14T23:11:52Z

GalloDaSballo marked the issue as duplicate of #139

#1 - Simon-Busch

2022-12-05T06:31:51Z

Marked this issue as Satisfactory as requested by @GalloDaSballo

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter