Submission Details
Severity:
PoolFactory::create is working wrong because of a one line in the function which causes it to change the name of the token
Description: The PoolFactory::create function inside it, it has initialized a new variable named liquidityTokenSymbol in which it uses the IERC20(tokenAddress).name() where it should be symbol not .name(), because if it is name then we can change the name and it would be anything but here in the protocol we are making token so it's symbol name should be used.
Impact: LOW because it will not cost more problem rather than having a different name.
Recommended Mitigation:
- string memory liquidityTokenSymbol = string.concat("ts", IERC20(tokenAddress).name());
+ string memory liquidityTokenSymbol = string.concat("ts", IERC20(tokenAddress).symbol());
Rewards breakdown
nSLOC
276This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.