Popcorn contest - yosuke's results

A multi-chain regenerative yield-optimizing protocol.

General Information

Platform: Code4rena

Start Date: 31/01/2023

Pot Size: $90,500 USDC

Total HM: 47

Participants: 169

Period: 7 days

Judge: LSDan

Total Solo HM: 9

Id: 211

League: ETH

Popcorn

Findings Distribution

Researcher Performance

Rank: 155/169

Findings: 1

Award: $35.48

QA:
grade-b

🌟 Selected for report: 0

πŸš€ Solo Findings: 0

[YO NC-1] Constants should be defined rather than using magic numbers

Handle

yosuke

Vulnerability details

Impact

Proof of Concept

https://github.com/code-423n4/2023-01-popcorn/blob/main/src/vault/adapter/abstracts/AdapterBase.sol#L85 https://github.com/code-423n4/2023-01-popcorn/blob/main/src/utils/MultiRewardEscrow.sol#L211

Constants should be defined rather than using magic numbers

[YO NC-2] Unlocked Pragma

Handle

yosuke

Vulnerability details

Impact

Every Solidity file specifies in the header a version number of the format pragma solidity ^0.8.0. The caret (^) before the version number implies an unlocked pragma, meaning that the compiler will use the specified version or above.

It’s usually a good idea to pin a specific version to know what compiler bug fixes and optimizations were enabled at the time of compiling the contract.

Proof of Concept

all files

ex) before

pragma solidity ^0.8.15;

after

pragma solidity 0.8.17;

#0 - c4-judge

2023-02-28T14:56:00Z

dmvt marked the issue as grade-b

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax Β© 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter