Submission Details
Severity:
Event Maths (Upgraded)
Summary
Detect missing events for critical arithmetic parameters.
Vulnerability Details
Location:
ThunderLoanUpgraded.updateFlashLoanFee(uint256) (src/upgradedProtocol/ThunderLoanUpgraded.sol#251-256) should emit an event for:
s_flashLoanFee = newFee (src/upgradedProtocol/ThunderLoanUpgraded.sol#255)
Impact
Oracle Manipulation: The contract relies on an external oracle for price feeds. If the oracle is manipulated, it could affect the contract's functionality and potentially lead to loss of funds.
Tools Used
Audit Wizard (Slither)
Recommendations
Emit an event for critical parameter changes.
Updates
Lead Judging Commences
0xnevi almost 2 years ago
Submission Judgement Published Assigned finding tags:
missing event emission updateFlashLoanFee
Rewards breakdown
nSLOC
387This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.