Submission Details
Severity:
Downcating can cause unexpected gas and impact function behaviour
Summary
Downcating can cause unexpected gas and impact function behaviour
Vulnerability Details
Unsafe downcasting of base m.gasFee in _performForcedBid() function results in breaking of accounting that impact the gasFee once it exceeds uint88.
Impact
Converting uint256 values into uint88 will clearly cause breaking of accounting result in overflow that will break the functionality of the whole function.
Tools Used
Manual code review.
Recommendations
Simply remove uint88 and used default values to avoid breakage of gasfee.
- m.gasFee = uint88(gasUsed * block.basefee); // @dev(safe-cast)
+ m.gasFee = gasUsed * block.basefee; // @dev(safe-cast)
Prize pool breakdown
Total prize
55,000 USDC
nSLOC
3,36516 USDC / LOC
50,000 USDC
5,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.