Root: The FeeCollected event has no parameters to log the collected amount;
Impact: Reduces auditability and transparency of fee collections.
The collectFee function does not emit FeeCollected
event.
The FeeCollected
event has no parameters, preventing tracking of the WETH amount transferred, which hinders auditing.
Likelihood:
During every collectFee call.
When auditing fee collections.
Impact:
Limits visibility into collected amounts, complicating reconciliation.
Low severity due to lack of direct exploit.
Missing Parameter Demonstration:
Call collectFee
and observe the empty FeeCollected
event.
Steps:
Mint WETH to the Snow contract.
Call collectFee as the collector.
Check event logs—no amount is recorded.
Update FeeCollected
to include the amount and emit it.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.