Submission Details
Severity:
loss of ownerFee as there is no way to retrieve them
Summary
In UpliftOnlyExample::onAfterSwap there is fees paid to owner that sent to the UpliftOnlyExample contract that has no function to retrieve the fees from it leading to fees being stuck in the contract forever
Vulnerability Details
In UpliftOnlyExample::onAfterSwap if it is ownerFee it being sent to the address of the router which has no function to take out those fees
File: UpliftOnlyExample.sol
342: if (ownerFee > 0) {
343: _vault.sendTo(feeToken, address(this), ownerFee);
Impact
Loss of funds
funds stuck in the contract forever
Tools Used
manual review
Recommendations
implement a function to retrieve the fees
Updates
Lead Judging Commences
n0kto 10 months ago
Submission Judgement Published Assigned finding tags:
finding_ownerFee_cannot_be_withdrawn
Likelihood: High, every swap. Impact: High, funds are stuck.
Prize pool breakdown
Total prize
49,600 OP
nSLOC
3,00017
OP / LOC
44,640
4,960
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.