Submission Details
Severity:
Missing check for array length mismatch in `AssetSwapPath::configure`
Vulnerability Details
The function does not check if the lengths of assets and dexSwapStrategyIds are compatible. For example, if assets has 4 elements, dexSwapStrategyIds should have 3 elements (as per the example in the NatSpec).
function configure(
Data storage self,
bool enabled,
address[] memory assets,
uint128[] memory dexSwapStrategyIds
)
internal
{
self.enabled = enabled;
self.assets = assets;
self.dexSwapStrategyIds = dexSwapStrategyIds;
}
Recommendations
Add a check to ensure the lengths of the arrays are compatible.
Prize pool breakdown
Total prize
70,000 USDC
nSLOC
3,25821 USDC / LOC
66,500
3,500
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.