Submission Details
Severity:
Potential Reentrancy Vulnerability
Description: Lack of reentrancy guards in critical transfer and swap functions in which No ReentrancyGuard implementation, Direct external calls without checks-effects-interactions pattern and Potential for economic exploitation
Impact:
Potential drain of contract funds
Recursive call exploitation
Economic manipulation
Proof of Concept:
contract ReentrancyAttack {
function attack(Strategy strategy) external {
strategy.claimAndSwap(attackAmount, minOut, maliciousPath);
}
receive() external payable {
// Recursive call potential
}
}
Recommended Mitigation:
Implement OpenZeppelin's ReentrancyGuard
Use checks-effects-interactions pattern
Add explicit reentrancy checks
Prize pool breakdown
Total prize
16,653 OP
nSLOC
25366 OP / LOC
15,800
853
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.