Submission Details
Severity: medium
ValidpoolsFeeData[pool][_to]'s length is not checked when afterUpdate()
Updates
Lead Judging Commences
Submission Judgement Published
Validated
Assigned finding tags:
finding_afterUpdate_does_not_check_limit_NFT_per_user
Likelihood: Medium/High, anyone can receive an unlimited NFT number but will cost creation of LP tokens and sending them. Impact: Low/Medium, DoS the afterUpdate and addLiquidityProportional but will be mitigable on-chain because a lot of those NFT can be burn easily in onAfterRemoveLiquidity.
Prize pool breakdown
Total prize
49,600 OP
nSLOC
3,00017 OP / LOC
High Medium
44,640
Low
4,960
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.