PoolTogether micro contest #1

A protocol for no loss prize savings on Ethereum

Twitter

General Information

Platform: Code4rena

Start Date: 29/07/2021

End Date: 31/07/2021

Period: 3 days

Status: Completed

Reporters: moneylegobatman, ninek

Pot Size: $20,000 USDC

Participants: 12

Reporters: moneylegobatman, ninek

Judge: LSDan

Id: 24

League: ETH

Findings Distribution

External Links

Code4rena Contest Page Github Contest Repository Github Findings Repository

Leaderboard


0xRajeev	1/12	$4,899.69	6	2	0	2	1	-	-
gpersoon	2/12	$4,166.70	3	2	1	0	0	-	0
hickuphh3	3/12	$3,249.19	5	2	0	1	0	-	-
cmichel	4/12	$2,002.31	6	1	0	3	0	-	-
pauliax	5/12	$1,606.53	4	1	0	1	0	-	-
GalloDaSballo	6/12	$1,344.95	4	1	0	1	0	-	-
shw	7/12	$992.88	4	0	0	2	0	-	-
tensors	8/12	$480.24	2	0	0	1	0	-	0
jonah1005	9/12	$565.86	2	1	0	0	0	-	0
hrkrshnn	10/12	$354.78	2	0	0	0	0	-	-

12 auditor(s).

Auditor per page

Page 1 of 2

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Auditors

Browse

Contests

Browse

Get in touch

Contact Twitter


0xRajeev	1/12	$4,899.69	6	2	0	2	1	-	-
gpersoon	2/12	$4,166.70	3	2	1	0	0	-	0
hickuphh3	3/12	$3,249.19	5	2	0	1	0	-	-
cmichel	4/12	$2,002.31	6	1	0	3	0	-	-
pauliax	5/12	$1,606.53	4	1	0	1	0	-	-
GalloDaSballo	6/12	$1,344.95	4	1	0	1	0	-	-
shw	7/12	$992.88	4	0	0	2	0	-	-
tensors	8/12	$480.24	2	0	0	1	0	-	0
jonah1005	9/12	$565.86	2	1	0	0	0	-	0
hrkrshnn	10/12	$354.78	2	0	0	0	0	-	-

12 auditor(s).

Auditor per page

Page 1 of 2

PoolTogether Micro Contest #1

$18,000 USDC main award pot
$2,000 USDC optimizations award pot
Join C4 Discord to register
Submit findings using the C4 form
Read our guidelines for more details
Starts July 29 00:00 UTC
Ends July 31 23:59 UTC

Contest Scope

This contest covers two additional yield sources for PoolTogether V3 prize pools: an mStable yield source and a swappable yield source. The mStable yield source allows prize pools to use mStable as a yield source. The swappable yield source allows governance to switch from one yield source to another.

Contract	Description	Source Lines of Code	External Calls	Libraries
MStableYieldSource.sol	PoolTogether MStable Yield Source	~75	MStable SavingsContractV2 <br/> ERC20 token	OpenZeppelin SafeERC20
SwappableYieldSource.sol	Meta yield source that allows governance to change yield sources	~200	PoolTogether IYieldSource <br /> ERC20 token	OpenZeppelin Contracts <br /> PoolTogether FixedPoint

Areas of Concern

mStable Interaction and Risks

Are we interacting correctly with the mStable protocol?
Are there fees or other risks that will impact the no-loss behaviour of the prize pool?
Is it possible to be rugged?

Swappable Yield Source Risks

Will dust or balance inconsistencies lock funds?
Under what conditions can it be rugged?

Resources

Documentation

Developer Discord

Architectural Walkthrough