Submission Details
Severity:
Out-of-order parameters in the TokensWithdrawn event
Description
The parameters in the TokensWithdrawn Event are out of order.
Impact
The out-of-order parameters can reflect wrong data being emitted by the RebateFiHook.
Proof of concept
In line 44, we have this parameter order: token, to, and amount
.
event TokensWithdrawn(address indexed token, address indexed to, uint256 amount);
But on line 75, we have other parameters in order: to, token, and amount
emit TokensWithdrawn(to, token , amount);
Recommended Mitigation
Fix the TokensWithdrawn event emit:
- emit TokensWithdrawn(to, token , amount);
+ emit TokensWithdrawn(token, to , amount);
Updates
Lead Judging Commences
chaossr 12 days ago
Submission Judgement Published Assigned finding tags:
Swapped token and to parameters in TokensWithdrawn event.
Rewards breakdown
nSLOC
150This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.