Submission Details
Severity:
Division precision in SmartVaultV3 can lead to minting with no fee
Summary
Division precision in mint can lead to user sidestepping fees in some specific cases.
Vulnerability Details
fee = _amount * ISmartVaultManagerV3(manager).mintFeeRate() / ISmartVaultManagerV3(manager).HUNDRED_PC()
with mintFeeRate being 1%, this will lead to 0 fees for _amount <= 999. With some low decimals/high value tokens (e.g. WBTC) and comparatively cheap gas environment, this will make it viable for user to split the deposit and avoid fees.
Impact
LOW - circumstantial.
Tools Used
Manual review
Recommendations
Implement minimal fee/minimal amount.
Updates
Lead Judging Commences
hrishibhat over 1 year ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
informational/invalid
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
60933 USDC / LOC
17,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.