Submission Details
Severity:
Chekinng if some amount is equal to type(uint256).max is wrong
Vulnerability Details
The checks in `AaveDIVAWrapperCore`, that checks if some amount is greater than the maximum uint256 is wrong.
because, if the user don't pass the maximum uint256, but pass a number bigger than his balance, the if statement won't execute, and may call the transfer with a wrong amount, making the transfer to revert, for example:
in this case
if (someAmount == type(uint256).max) {
someAmount = _userBalance;
}
This check is wrong and should be replace by:
if (someAmount > _userBalance) {
someAmount = _userBalance;
}
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
51929 USDC / LOC
14,000
1,000
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.