My BIGGEST Bounty Yet

2 years ago
13

Walkthrough of the first two high severity findings I discovered auditing Solidity smart contracts on Code4rena.

First Finding: The check for value transfer success is made after the return statement
https://github.com/code-423n4/code423n4.com/blob/main/_data/reports/2022-05-sturdy.md#h-02-the-check-for-value-transfer-success-is-made-after-the-return-statement-in-_withdrawfromyieldpool-of-lidovault

Second Finding: no-revert-on-transfer ERC20 tokens can be drained
https://github.com/code-423n4/code423n4.com/blob/main/_data/reports/2022-05-cally.md#h-01-no-revert-on-transfer-erc20-tokens-can-be-drained

Additional Reading:
Return Unchecked - Low Level Calls:
https://github.com/code-423n4/code423n4.com/blob/main/_data/reports/2021-11-bootfinance.md#m-02-unchecked-low-level-calls
https://github.com/code-423n4/code423n4.com/blob/main/_data/reports/2021-11-malt.md#m-12-permissions---return-values-not-checked-when-sending-eth
https://github.com/code-423n4/code423n4.com/blob/main/_data/reports/2021-12-nftx.md#m-08-low-level-call-return-value-not-checked
ERC721 - safeTransferFrom:
https://github.com/code-423n4/code423n4.com/blob/main/_data/reports/2022-05-cally.md#m-09-use-safetransferfrom-instead-of-transferfrom-for-erc721-transfers
https://github.com/code-423n4/code423n4.com/blob/main/_data/reports/2022-04-backed.md#m-03-sendcollateralto-is-unchecked-in-closeloan-which-can-cause-users-collateral-nft-to-be-frozen
https://github.com/code-423n4/code423n4.com/blob/main/_data/reports/2022-04-backed.md#m-07-mintborrowticketto-can-be-a-contract-with-no-onerc721received-method-which-may-cause-the-borrowticket-nft-to-be-frozen-and-put-users-funds-at-risk
https://github.com/code-423n4/code423n4.com/blob/main/_data/reports/2022-01-sandclock.md#m-09-no-use-of-safemint-as-safe-guard-for-users-

Content:
00:00 - [Intro]
0:32 - [First Finding - $14.84]
4:25 - [Second Finding - $3071.03]
12:07 - [Progress Update]

Loading comments...