Submission Details
Severity:
Division by zero not prevented
Summary
In the LibUnripe::unripeToUnderlying() function, division below take an input parameter, supply, which does not have any zero-value checks, which may lead to the functions reverting when zero is passed.
Vulnerability Details
underlying is calculated as follows:
underlying = s.u[unripeToken].balanceOfUnderlying.mul(unripe).div(supply);
The vulnerability stems from the .div(supply)
Impact
The unripeToUnderlying() function will revert if supply is zero.
Tools Used
Manual Review
Recommendations
Perform zero-value check on the function parameters.
Prize pool breakdown
Total prize
100,000 USDC
nSLOC
5,77617 USDC / LOC
95,000 USDC
5,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.