Submission Details
Severity:
Hardcoded UniswapV3 router address
Summary
THe UniswapV3Router contract address is hardcoded in the Fees contract.
Vulnerability Details
THe Fees contract is using the UniswapV3 router contract to swap Fees to WETH. However the contract address is hardcoded to the address for Ethereum Mainnet, Goerli, Arbitrum, Optimism & Polygon. If the contract is intended to be used on a different chain, the address might be different.
In general it is a bad practice to use hardcoded values for this.
Impact
Hardcoded address might be wrong.
Tools Used
Manual Review
Recommendations
use immutable variable that is set on contract creation for the unsiwapV3Router address.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.