Tadle

Tadle
DeFiFoundry
27,750 USDC
View results
Submission Details
Severity: low
Invalid

NatSpec Comment Incorrectly States Settlement Time Check

Vulnerability Details

The NatSpec comment for the updateMarket() function in SystemConfig.sol incorrectly states that there is a check for settlement time passing. However, no such check is implemented.

Impact

This discrepancy between the documentation and the actual code implementation can lead to:

  1. Misunderstanding of the function's behavior by developers and auditors

  2. Potential security vulnerabilities if the missing check is assumed to be present

Recommendation

Either implement the missing settlement time check as described in the NatSpec comment, or update the comment to accurately reflect the current function behavior.

Updates

Lead Judging Commences

0xnevi Lead Judge about 1 year ago
Submission Judgement Published
Invalidated
Reason: Known issue
Assigned finding tags:

[invalid] finding-Admin-Errors-Malicious

The following issues and its duplicates are invalid as admin errors/input validation/malicious intents are1 generally considered invalid based on [codehawks guidelines](https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity#findings-that-may-be-invalid). If they deploy/set inputs of the contracts appropriately, there will be no issue. Additionally admins are trusted as noted in READ.ME they can break certain assumption of the code based on their actions, and

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.