15,000 USDC
Submission Details
Severity:
View function should be public
Summary
The function getCashPrior in MErc20DelegateFixer.sol should be public so that anyone can get the return value which is EIP20Interface(underlying).balanceOf(address(this)) + badDebt. Making it public will not break the protocol's functionality.
Impact
Users will no be able to see the cash prior directly.
Tools Used
Manual Review
Recommendations
Change the visibility from internal to public.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
39438
USDC / LOC
14,000 USDC
1,000 USDC
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.