Submission Details
Severity:
amountReceivedLD variable in TempleGold::_lzReceive() is always zero
Summary
amountReceivedLD is will always be zero and incorrect because _credit returns an instantiated but yet to be set variable. This will cause the event to emit the wrong data
https://github.com/Cyfrin/2024-07-templegold/blob/da199ee9316665e3ea9006ce9c9f5a7fd7cbc605/protocol/contracts/templegold/TempleGold.sol#L335
Recommendations
Consider inspecting the users' provided data for extra layer of security.
Prize pool breakdown
Total prize
25,000 USDC
nSLOC
99825 USDC / LOC
20,000 USDC
2,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.