Part 2

Zaros

PerpetualsDEXFoundrySolidity

70,000 USDC

View results

Previous Next

Submission Details

Severity: medium

Invalid

Storage Collision Risk in _getFeeConversionKeeperStorage()

m3ntor

Summary

https://github.com/Cyfrin/2025-01-zaros-part-2/blob/main/src/external/chainlink/keepers/fee-conversion-keeper/FeeConversionKeeper

Vulnerability Details

Uses assembly to manually assign storage slots.

Impact

If the contract is upgraded, this can lead to storage slot corruption, causing critical state inconsistencies.

Tools Used

Manual Review

Recommendations

Use StorageSlot.getUint256Slot() from OpenZeppelin instead.

Updates

Lead Judging Commences

inallhonesty Lead Judge 6 months ago

Submission Judgement Published

Invalidated

Reason: Lack of quality

Prize pool breakdown

Total prize

70,000 USDC

nSLOC

3,258

21 USDC / LOC

High Medium

66,500

Low

3,500

Live

The contest is live. Earn rewards by submitting a finding.

Judging

Submissions are being carefully reviewed by our judges.

View all submissions

Appeals

This is your time to appeal against judgements on your submissions.

Appeals Review

Appeals are being carefully reviewed by our judges.

Rewards Distribution

The contest is complete and the rewards are being distributed.

View results

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.