Submission Details
Severity:
Incorrect conversion of implicit type
Summary
The Initialize function in the systemConfig contract defines how the structure of the upgraded contract should look like
Vulnerability Details
function initialize(int256 _basePlatformFeeRate, uint256 _baseReferralRate) external onlyOwner {
//@audit Is there a state variable that has the basePlaformFeeRate?
basePlatformFeeRate = _basePlatformFeeRate; //@audit compatible intger
baseReferralRate = _baseReferralRate;
}
The function is meant to set the structure of the contract and converting the _basePlatFormFeeRate can result to implicit type conversion making the system not achieve what it is intended to do.
Impact
Distrubt the purpose of the system by not allowing the right conversion
Tools Used
Manual
Recommendations
Completely convert the int256 _basePlatformFeeRate to a uint
Prize pool breakdown
Total prize
27,750 USDC
nSLOC
1,22923 USDC / LOC
25,000 USDC
2,750 USDC
2,250 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.