stake.link

stake.link
DeFiHardhatBridge
27,500 USDC
View results
Submission Details
Severity: medium
Invalid

No update of lastLockId

Summary

In contract SDLPoolPrimary.sol, the function handleIncomingRESDL() doesn't update lastLockId. In the case of the param _lockId is bigger than lastLockId, there should be update of lastLockId.

Vulnerability Details

lastLockId is used in many places through the codebase. Without correct update, the whole functionality of code is going to be affected. Similarly The same update should be done if _lockId is equal to lastLockId in function handleOutgoingRESDL().

Impact

All parts use lastLockId will be affected due to unupdated lastLockId

Tools Used

Manual Analysis

Recommendations

Put a check that controls whether the param _lockİd is equal to lastLockId

Updates

Lead Judging Commences

0kage Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.