Steadefi

DeFiHardhatFoundryOracle

35,000 USDC

View results

Previous Next

Submission Details

Severity: high

Invalid

Manipulated call found in GMXDeposit.processDepositCancellation(GMXTypes.Store)

firmanregar

Summary

Manipulated call found: (success) = self.depositCache.user.call{value: address(this).balance}() in GMXDeposit.processDepositCancellation(GMXTypes.Store)

Vulnerability Details

The destination could be manipulated through GMXDeposit.processDepositCancellation(GMXTypes.Store). Only the destination could be manipulated

Impact

Tools Used

Slither, Manual Code Review

Recommendations

Do not allow arbitrary calls

Updates

Lead Judging Commences

hans Lead Judge almost 2 years ago

Submission Judgement Published

Invalidated

Reason: Lack of quality

Prize pool breakdown

Total prize

35,000 USDC

nSLOC

2,289

15 USDC / LOC

High Medium

33,000 USDC

Low

2,000 USDC

Live

The contest is live. Earn rewards by submitting a finding.

Judging

Submissions are being carefully reviewed by our judges.

View all submissions

Appeals

This is your time to appeal against judgements on your submissions.

Appeals Review

Appeals are being carefully reviewed by our judges.

Rewards Distribution

The contest is complete and the rewards are being distributed.

View results

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.