Liquidity Management
Gamma
DeFiFoundry
50,000 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

DoS via Blacklisted tokens

linemi

Description:

If USDC blacklists the vault address, withdrawals will fail. The afterOrderExecution function does not handle blacklisting, leaving funds stuck.

Impact:

  • Users cannot withdraw funds.

  • Protocol operations halted.

Affected Code:

  • PerpetualVault.sol#_transferToken() uses safeTransfer, which reverts on blacklist.

Recommendation:
Use a pull-based withdrawal pattern where users claim funds instead of direct transfers.

Updates

Lead Judging Commences

n0kto Lead Judge 5 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

Informational or Gas

Please read the CodeHawks documentation to know which submissions are valid. If you disagree, provide a coded PoC and explain the real likelihood and the detailed impact on the mainnet without any supposition (if, it could, etc) to prove your point.

n0kto Lead Judge 5 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

Informational or Gas

Please read the CodeHawks documentation to know which submissions are valid. If you disagree, provide a coded PoC and explain the real likelihood and the detailed impact on the mainnet without any supposition (if, it could, etc) to prove your point.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.