Submission Details
Severity:
Potential Arithmetic Over/Underflows `ProxyFactory.sol`
Summary
Mathematical operations on uint256 without overflow checks could cause unexpected behaviors.
Vulnerability Details
Operations like closeTime > block.timestamp + MAX_CONTEST_PERIOD in setContest do not have overflow checks when doing math on uint256.
Impact
Potential arithmetic over/underflows leading to incorrect contest period validation.
Tools Used
Manual
Recommendations
Use SafeMath libraries or add manual overflow validation when doing math.
function setContest(/*...*/) {
// With SafeMath
if (closeTime > block.timestamp.add(MAX_CONTEST_PERIOD)) {
revert("Close time too long");
}
// Rest of function...
}
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.