Submission Details
Severity:
`fundsSafu` modifier will be useless on L2 before all users have successfully migrated.
Summary
fundsSafu modifier will be useless on L2 before all users have successfully migrated.
Vulnerability Details
When calculating the token entitlements, the contract will not take into account the funds that are already transferred, but waiting users to claim them (e.g. via L2ContractMigrationFacet#redeemDepositsAndInternalBalances.
This would make the modifier useless until all users have successfully redeemed their deposits and would allow for exploits to happen.
Impact
Invariable will be useless and will allow for exploits to happen.
Tools Used
Manual review
Recommendations
Add the to-be-claimed funds in Invariable
Updates
Lead Judging Commences
inallhonesty about 1 year ago
Submission Judgement Published Reason: Lack of quality
Assigned finding tags:
Quality
Appeal created
deadrosesxyz
about 1 year ago
inallhonesty
about 1 year ago
inallhonesty about 1 year ago
Submission Judgement Published Assigned finding tags:
`fundsSafu` doesn't properly implement the entitlement calculation - funds to be migrated
Prize pool breakdown
Total prize
250,000 USDC
nSLOC
12,28520 USDC / LOC
220,000 USDC
10,000 USDC
20,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.