Submission Details
Severity:
Missing input validation in CommunityVCS::deposit
Summary
In CommnuityVCS::deposit there is a missing check as to whether the _amount input value is 0 or not.
Vulnerability Details
A zero vlaue of _amount can be inputted into the function as there is no restriction on 0 values being inputted.
(, uint256 maxDeposits) = getVaultDepositLimits();
if (maxDeposits > vaultMaxDeposits) {
Impact
Impact: Wasted gas for users
Tools Used
Manual
Recommendations
Implement _amount == 0 checks as input validation.
Prize pool breakdown
Total prize
50,000 USDC
nSLOC
2,53020
USDC / LOC
42,000 USDC
4,250 USDC
3,750 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.