Submission Details
Severity:
s_tokenToAddress mapping can lead to collision
Summary
The mapping uses string tokenSymbol to store the tokenAddress addresses.
Vulnerability Details
The mapping s_tokenToAddress uses string tokenSymbol for key, as token symbol is usually comprised of 3 letters which can easily be reused and thus lead to overwriting existing entries and ultimately to loss of funds.
mapping(string tokenSymbol => address tokenAddress) private s_tokenToAddress;
This may lead to overwriting existing address and may cause lost of funds.
Impact
High as it may lead to loss of funds
Tools Used
Manual Review
Recommendations
Change the key of the mapping to a more robust implementation.
Updates
Lead Judging Commences
0xnevi almost 2 years ago
Submission Judgement Published Assigned finding tags:
deployToken: non-unique symbol for tokens
Rewards breakdown
nSLOC
99This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.