TempleGold
TempleDAO
Foundry
25,000 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

quote() function does not exist in TempleGold.sol to accurate estimate the cost of cross-chain messages

peanuts

Summary

When integrating with LayerZero, the contract should have a quote() function so that users can accurately estimate the cost of cross-chain messaging. TempleGold does not have the quote()function, unlike TempleTeleporter.sol.

Vulnerability Details

When interacting with LayerZero lzSend(), the function requires a messaging fee, which can be accurately estimated through the use of the quote()function. TempleTeleporter.sol has the function, but not TempleGold.sol.

function quote(
uint32 _dstEid,
bytes memory _message,
bytes memory _options
) external view returns (MessagingFee memory fee) {
return _quote(_dstEid, _message, _options, false);
}

Impact

Users may face revert()when sending inaccurate msg.valueas the messaging fee

Tools Used

Manual Review

Recommendations

Recommend adding the quote functionality to TempleGold.sol contract as well.

Updates

Lead Judging Commences

inallhonesty Lead Judge about 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

quote() function does not exist in TempleGold.sol

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.