Submission Details
Severity:
`TSwappPool::deposit` is missing deadline check, causing transactions to complete even after the deadline has passed
TSwappPool::deposit is missing deadline check, causing transactions to complete even after the deadline has passed
Description: The deposit function accepts a deadline parameter, which according to the documentation is "The deadline for the transaction to be completed by". But, it is never used in the function, as a consequence, transactions can be completed even after the deadline has passed, in market conditions where deposit rate is unfavorable.
Impact: Transactions could be sent when market conditons are unfavorable to deposit, even when adding a deadlie parameter.
Proof of Concept: The deadline parameter is unused.
Recommended Mitigation:
function deposit(
uint256 wethToDeposit,
uint256 minimumLiquidityTokensToMint,
uint256 maximumPoolTokensToDeposit,
uint64 deadline
)
external
+ revertIfDeadlinePassed(deadline)
revertIfZero(wethToDeposit)
returns (uint256 liquidityTokensToMint)
Updates
Appeal created
inallhonesty 12 months ago
Submission Judgement Published Assigned finding tags:
`deposit` is missing deadline check causing transactions to complete even after the deadline
Rewards breakdown
nSLOC
276This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.