Submission Details
Severity:
Absence of Value Bounds in Critical Function Parameters
Vulnerability Details
Multiple functions are lacking checks for minimum and maximum permissible values. This absence of bounds validation allows for the setting of arbitrary values, including potentially harmful or non-sensical ones:
SDLPoolCCIPController::setMaxLINKFee()LinearBoostController::constructor(uint64 _maxLockingDuration, uint64 _maxBoost)LinearBoostController::setMaxLockingDuration()LinearBoostController::setMaxBoost()
Recommendations
Implement validation checks for all critical function parameters that can potentially be set to arbitrary values.
Prize pool breakdown
Total prize
27,500 USDC
nSLOC
1,41419 USDC / LOC
25,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.