60,000 USDC
Submission Details
Severity:
Incorrect Memory Manipulation at cairoStringPack in Cairo library
Hello ArkProject,
The assembly code shifts the value of v by 8 bits (shr(8, v)), which might not align correctly with the Cairo string format or the Solidity memory layout. This manipulation can lead to packing incorrect data into packedData.
The use of mload assumes that the data is aligned to 32 bytes, but the CAIRO_STR_LEN (31 bytes) means that the last byte of a 32-byte word might be incorrectly handled, especially when the string length is not a multiple of 32 bytes.
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,30126 USDC / LOC
50,000 USDC
5,500 USDC
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.