stake.link

stake.link
DeFiHardhatBridge
27,500 USDC
View results
Submission Details
Severity: low
Invalid

SDLPoolPrimary and SDLPoolSecondary can be mistakenly deployed to the wrong chains

Summary

the SDLPrimary and SDLSecondary pool are to be deployed on their designated chains(ethereum for primary and arbitrum and optimism for the secondary) however the is nothing stopping them from being deployed on the wrong chains by a malicious owner or just by mistake.

Vulnerability Details

Impact

the impact of deploying on the wrong chain is the waste of gas fees and general inconvenience

Tools Used

manual audit

Recommendations

I recommend you use a factory to deploy the pools or enforce the chain by checking the constructor for the chain id

Updates

Lead Judging Commences

0kage Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.