Submission Details
Severity: high
ValidUsing `counter` variable instead of `depositId` in fee refund logic leads to incorrect refunds
Author Revealed upon completion
Updates
Lead Judging Commences
Submission Judgement Published
Validated
Assigned finding tags:
finding_counter_invalid_during_cancelFlow_after_withdrawing
Likelihood: Low, contract has to call cancelFlow after a withdraw, and the settle action is already executed by GMX. Impact: High, the fees will be distributed to the last depositor and not the withdrawer.
finding_counter_invalid_during_handleReturn
Likelihood: Medium/High, when withdraw on a 1x vault. Impact: High, the fees will be distributed to the last depositor and not the withdrawer.
Prize pool breakdown
Total prize
50,000 USDC
nSLOC
1,91026 USDC / LOC
High Medium
47,500
Low
2,500
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
View preliminary resultsAppeals Review
Appeals are being carefully reviewed by our judges.
Rewards Distribution
The contest is complete and the rewards are being distributed.