Submission Details
Severity:
Deposit Limit can be breached
Summary
The deposit limit can be breached directly by transferring the token to the vault contract.
Vulnerability Details
Not sure why someone would transfer the token directly to the vault contract since the deposit event would not be emitted and the off-chain service would not mint the tokens on L2.
Impact
The deposit limit can be breached and the contract can go into deadlock. The signer or the owner can clear the deadlock by removing the tokens from the vault.
Tools Used
forge
Recommendations
There is no way to restrict incoming token transfers.
Updates
Lead Judging Commences
0xnevi almost 2 years ago
Submission Judgement Published Assigned finding tags:
depositTokensToL2(): DoS deposits via DEPOSIT_LIMIT
Rewards breakdown
nSLOC
99This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.