Canto Application Specific Dollars and Bonding Curves for 1155s - zhaojohnson's results

Tokenizable bonding curves using a Stablecoin-as-a-Service token

General Information

Platform: Code4rena

Start Date: 13/11/2023

Pot Size: $24,500 USDC

Total HM: 3

Participants: 120

Period: 4 days

Judge: 0xTheC0der

Id: 306

League: ETH

Canto

Findings Distribution

Researcher Performance

Rank: 115/120

Findings: 1

Award: $1.37

🌟 Selected for report: 0

🚀 Solo Findings: 0

Lines of code

https://github.com/code-423n4/2023-11-canto/blob/335930cd53cf9a137504a57f1215be52c6d67cb3/1155tech-contracts/src/bonding_curve/LinearBondingCurve.sol#L14-L25 https://github.com/code-423n4/2023-11-canto/blob/335930cd53cf9a137504a57f1215be52c6d67cb3/1155tech-contracts/src/Market.sol#L150-L189

Vulnerability details

Impact

MEV Attack to gain profit

Proof of Concept

When we observe Alice want to buy some shares, we buy some shares with current price by frontrunning. Alice's buy() operation will increase current share's price. Then we sell our shares to gain profits.

Tools Used

Manual

Assessed type

MEV

#0 - c4-pre-sort

2023-11-19T09:12:01Z

minhquanym marked the issue as duplicate of #12

#1 - c4-judge

2023-11-28T23:38:55Z

MarioPoneder marked the issue as satisfactory

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter