Submission Details
Severity:
Potential Reentrancy in Exit Short
Summary
Exiting shorts via exitShort can be vulnerable to reentrancy.
Vulnerability Details
exitShort calls external contracts to burn debt. If these are malicious, they could reenter before state is updated.
For example:
function exitShort(
// ...
) external {
asset.burnMsgSenderDebt(amount);
// Vulnerable to reentry
short.ercDebt -= amount;
}
Impact
Reentrancy could prevent debt burn or cause unexpected side effects.
Tools Used
Manual
Recommendations
Use checks-effects-interactions pattern
Add reentrancy guard
Prize pool breakdown
Total prize
55,000 USDC
nSLOC
3,36516 USDC / LOC
50,000 USDC
5,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.