Stratax Contracts

First Flight #57
Beginner FriendlyDeFi
100 EXP
View results
Submission Details
Impact: medium
Likelihood: medium
Invalid

Flash Loan Fee Basis Points Hardcoded

Root + Impact

Description

  • Describe the normal behavior in one or more sentences

  • Explain the specific issue or problem in one or more sentences

// Root cause in the codebase with @> marks to highlight the relNormal behavior: Flash loan fee should match current Aave configuration.
Issue: Fee is hardcoded in initialize() as flashLoanFeeBps = 9;.evant section

Risk

Likelihood:

  • Reason 1 // Describe WHEN this will occur (avoid using "if" statements)

  • Reason 2

Impact:

  • Impact 1

  • Impact 2

Proof of Concept

Deploy on a network where Aave fee ≠ 0.09%

Recommended Mitigation

- flashLoanFeeBps = 9;
+ flashLoanFeeBps = aavePool.FLASHLOAN_PREMIUM_TOTAL(); // Fetch from pool
Updates

Lead Judging Commences

izuman Lead Judge 16 days ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!