Submission Details
Impact:
Likelihood:
[I-1]: Insufficient Test Coverage in Critical Contracts
Summary
Running the forge coverage command reveals that key contracts, notably LevelOne.sol and LevelTwo.sol, exhibit low test coverage.
Vulnerability Details
| File | % Lines | % Statements | % Branches | % Funcs |
|---|---|---|---|---|
| script/DeployLevelOne.s.sol | 66.67% (14/21) | 71.43% (10/14) | 100.00% (0/0) | 57.14% (4/7) |
| script/GraduateToLevelTwo.s.sol | 0.00% (0/18) | 0.00% (0/18) | 100.00% (0/0) | 0.00% (0/3) |
| src/LevelOne.sol | 67.86% (76/112) | 65.98% (64/97) | 28.00% (7/25) | 76.19% (16/21) |
| src/LevelTwo.sol | 0.00% (0/13) | 0.00% (0/6) | 100.00% (0/0) | 0.00% (0/7) |
| test/mocks/MockUSDC.sol | 100.00% (2/2) | 100.00% (1/1) | 100.00% (0/0) | 100.00% (1/1) |
| Total | 55.42% (92/166) | 55.15% (75/136) | 28.00% (7/25) | 53.85% (21/39) |
Impact
Insufficient testing can lead to undetected bugs, increasing the risk of software instability and potential security vulnerabilities.
Tools Used
Foundry
Recommendations
Enhance the test suite to achieve comprehensive coverage across all contracts with a percentage of at least 90%.
Rewards breakdown
nSLOC
243This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.