Submission Details
Severity:
Events are missing indexed fields
Vulnerability Details
Index event fields make the field more quickly accessible to off-chain tools that parse events. However, note that each index field costs extra gas during emission, so it's not necessarily best to index the maximum allowed per event (three fields).
Proof of Concept
File: contracts/interfaces/IDistribution.sol
100: event OverplusBridged(uint256 amount, bytes uniqueId);
File: contracts/interfaces/IL2MessageReceiver.sol
14: event MessageSuccess(uint16 senderChainId, bytes senderAndReceiverAddresses, uint64 nonce, bytes payload);
24: event MessageFailed(
39: event RetryMessageSuccess(uint16 senderChainId, bytes senderAndReceiverAddresses, uint64 nonce, bytes payload);
Impact
Slower access for off-chain tools that parse events.
Recommendations
Consider indexing fields in the listed events.
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.