Submission Details
Severity:
Centralization Risk in Yield Collection in the `AaveDIVAWrapperCore` contract
Description: The AaveDIVAWrapperCore::registerCollateralToken function doesn't verify if the token implements the correct ERC20 interface or has the expected decimals.
Impact:
Potential integration of non-compliant tokens
Could break decimal calculations
Risk of system manipulation
Recommended Mitigation: Add comprehensive token validation including:
Interface compliance checks
Decimals verification
Minimum balance/supply checks
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
51929 USDC / LOC
14,000
1,000
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.