Submission Details
Severity: high
ValidUsing `counter` variable instead of `depositId` in fee refund logic leads to incorrect refunds
Updates
Lead Judging Commences
Submission Judgement Published
Validated
Assigned finding tags:
finding_counter_invalid_during_cancelFlow_after_withdrawing
Likelihood: Low, contract has to call cancelFlow after a withdraw, and the settle action is already executed by GMX. Impact: High, the fees will be distributed to the last depositor and not the withdrawer.
finding_counter_invalid_during_handleReturn
Likelihood: Medium/High, when withdraw on a 1x vault. Impact: High, the fees will be distributed to the last depositor and not the withdrawer.
Prize pool breakdown
Total prize
50,000 USDC
nSLOC
1,91026 USDC / LOC
High Medium
47,500
Low
2,500
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.