Submission Details
Severity:
`type(uint256).max` Approvals Aren't Universal in All Tokens
Summary
Certain tokens, do not recognize type(uint256).max as signifying an infinite approval.
Instead, they downcast such approvals to uint96, treating it as a standard numerical limit rather than an infinite allowance.
Once these approvals are depleted, the dependent contract operations could be hampered or halted entirely.
Vulnerability Details
File: contracts/L2TokenReceiver.sol
143: TransferHelper.safeApprove(newParams_.tokenIn, router, type(uint256).max)
144: TransferHelper.safeApprove(newParams_.tokenIn, nonfungiblePositionManager, type(uint256).max)
146: TransferHelper.safeApprove(newParams_.tokenOut, nonfungiblePositionManager, type(uint256).max)
Updates
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.