Submission Details
Severity:
Wrong merkle proofs generations
Summary
There is an error in the constant used in Line 7 of makeMerkle.js which will lead to generation of invalid merkle proofs.
Vulnerability Details
On Line 7 the constant 1e18 is used instead of 1e6, because USDC uses 6 decimals.
The merkleProof.js is out of the scope but the impact of this issue certainly lies within the scope.
Impact
The users will not be able to claim the airdrop.
Tools Used
Manual Review
Recommendations
Change the costant in Line 7 to 1e6 so that it reads as: const amount = (25 * 1e6).toString().
Updates
Lead Judging Commences
inallhonesty about 1 year ago
Submission Judgement Published Assigned finding tags:
wrong-usdc-decimals-in-merkle
Rewards breakdown
nSLOC
62This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.