Submission Details
Severity:
Manipulated call found in GMXWithdraw.processWithdraw(GMXTypes.Store)
Summary
Manipulated call found: (success) = self.withdrawCache.user.call{value: address(this).balance}() in GMXWithdraw.processWithdraw(GMXTypes.Store)
Vulnerability Details
The destination could be manipulated through GMXWithdraw.processWithdraw(GMXTypes.Store) Only the destination could be manipulated
Impact
Tools Used
Slither, Manual Code Review
Recommendations
Do not allow arbitrary calls
Prize pool breakdown
Total prize
35,000 USDC
nSLOC
2,28915 USDC / LOC
33,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.