60,000 USDC
Submission Details
Severity:
Inconsistent Offset Handling at cairoStringPack in Cairo library
Hello ArkProject,
The
offsetis initially set to0x20, which skips the first 32 bytes (usually the length prefix of a dynamic array in Solidity). However, this offset is used throughout the function without further checks. This could lead to incorrect memory access if the string does not conform to the expected format.
Mitigation Recommendations:
Add Boundary Checks: Ensure that
offsetdoes not exceed the bounds ofstrBytesand that memory accesses are safe.
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,30126 USDC / LOC
50,000 USDC
5,500 USDC
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.