Submission Details
Severity:
LP token name & symbol
Summary
If a user is creating a pool for an ERC20 token that noes not implement name() or symbol() the PoolFactory.createPool() will fail.
Vulnerability Details
In both cases bellow this code will fail if the target ERC20 does not implement the called function
In PoolFactory.createPool()
string memory liquidityTokenName = string.concat("T-Swap ", IERC20(tokenAddress).name());
string memory liquidityTokenSymbol = string.concat("ts", IERC20(tokenAddress).name());
Impact
Tools Used
Recommendations
Use try catch to handle such case.
Rewards breakdown
nSLOC
276This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.