bnb-party / BNBParty.Factory

Smart contract manages Liquidity Pools and Token creation, enabling decentralized swaps and liquidity handling

MIT License

2 stars 0 forks source link

add Note #84

Closed YouStillAlive closed 3 weeks ago

github-actions[bot] commented 3 weeks ago

Methods

Symbol	Meaning
◯	Execution gas for this method does not include intrinsic gas overhead
△	Cost was non-zero but below the precision setting for the currency display (see options)

	Min	Max	Avg	Calls	usd avg
BNBPartyFactory
createParty(string,string)	5,709,285	5,883,329	5,743,268	37	3.42
joinParty(address,uint256)	145,214	5,729,461	1,944,865	29	1.16
leaveParty(address,uint256,uint256)	177,916	203,322	183,624	5	0.11
pause()	-	-	49,174	5	0.03
setBNBPartySwapRouter(address)	26,439	48,579	47,348	18	0.03
setNonfungiblePositionManager(address,address)	29,248	71,239	68,904	18	0.04
setSwapRouter(address)	48,556	48,580	48,578	16	0.03
unpause()	-	-	27,186	5	0.02
withdrawFee()	-	-	34,122	2	0.02
withdrawLPFee(address[])	-	-	176,452	1	0.11
withdrawPartyLPFee(address[])	-	-	176,588	2	0.11
ERC20Token
approve(address,uint256)	46,383	46,395	46,392	4	0.03
NonfungiblePositionManager
approve(address,uint256)	46,052	46,395	46,270	6	0.03
createAndInitializePoolIfNecessary(address,address,uint24,uint160)	4,592,181	4,613,717	4,597,565	4	2.74
mint((address,address,uint24,int24,int24,uint256,uint256,uint256,uint256,address,uint256))	510,896	610,880	544,442	4	0.32
SwapRouter
exactInput((bytes,address,uint256,uint256,uint256))	135,944	145,502	142,316	3	0.08
multicall(bytes[])	-	-	163,958	2	0.10

Deployments

	Min	Max	Avg	Block %	usd avg
BNBPartyFactory	-	-	5,290,679	4.1 %	3.15
ERC20Token	-	-	598,865	0.5 %	0.36
MockContract	-	-	107,813	0.1 %	0.06
MockNonfungibleTokenPositionDescriptor	-	-	111,329	0.1 %	0.07
NonfungiblePositionManager	5,171,512	5,171,524	5,171,523	4 %	3.08
SqrtPriceCalculator	-	-	278,712	0.2 %	0.17
SwapRouter	2,201,078	2,201,090	2,201,089	1.7 %	1.31
UniswapV3Factory	5,437,097	5,437,109	5,437,108	4.2 %	3.24

Solidity and Network Config

Settings	Value
Solidity: version	0.8.26
Solidity: optimized	true
Solidity: runs	200
Solidity: viaIR	false
Block Limit	130,000,000
L1 Gas Price	1 gwei
Token Price	596.19 usd/bnb
Network	BINANCE
Toolchain	hardhat

codecov-commenter commented 3 weeks ago

:warning: Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

:exclamation: Your organization needs to install the Codecov GitHub app to enable full functionality.

github-actions[bot] commented 3 weeks ago

Slither report

THIS CHECKLIST IS NOT COMPLETE. Use --show-ignored-findings to show all the results. Summary

unused-return (6 results) (Medium)
reentrancy-benign (1 results) (Low)
reentrancy-events (4 results) (Low)
naming-convention (8 results) (Informational)
reentrancy-unlimited-gas (1 results) (Informational)
unused-return

Impact: Medium Confidence: Medium
[ ] ID-0 BNBPartyLiquidity._handleLiquidity(address) ignores return value by (sqrtPriceX96,None,None,None,None,None,None) = pool.slot0()

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyLiquidity.sol#L14-L56

[ ] ID-1 BNBPartyFee._collectFee(address,INonfungiblePositionManager) ignores return value by manager.collect(INonfungiblePositionManager.CollectParams({tokenId:lpToTokenId[liquidityPool],recipient:msg.sender,amount0Max:type()(uint128).max,amount1Max:type()(uint128).max}))

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyFee.sol#L118-L130

[ ] ID-2 BNBPartyLiquidityHelper._decreaseAndCollect(uint256,uint128) ignores return value by BNBPositionManager.collect(INonfungiblePositionManager.CollectParams({tokenId:tokenId,recipient:address(this),amount0Max:uint128(amount0),amount1Max:uint128(amount1)}))

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyLiquidityHelper.sol#L16-L40

[ ] ID-3 BNBPartyFee._getFeeGrowthInsideLastX128(IUniswapV3Pool,bytes32) ignores return value by (None,feeGrowthInside0LastX128,feeGrowthInside1LastX128,None,None) = pool.positions(key)

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyFee.sol#L31-L43

[ ] ID-4 BNBPartyCreation._createLP(INonfungiblePositionManager,address,address,uint256,uint256,uint160,uint24,IBNBPartyFactory.Ticks) ignores return value by (tokenId,None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:ticks.tickLower,tickUpper:ticks.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp}))

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyCreation.sol#L43-L77

[ ] ID-5 BNBPartySwaps._executeSwap(ISwapRouter,ISwapRouter.ExactInputParams) ignores return value by ISwapRouter(router).exactInput{value: value}(params)

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartySwaps.sol#L47-L53

reentrancy-benign

Impact: Low Confidence: Medium

[ ] ID-6 Reentrancy in BNBPartyLiquidity._handleLiquidity(address): External calls:

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyLiquidity.sol#L14-L56

reentrancy-events

Impact: Low Confidence: Medium

[ ] ID-7 Reentrancy in BNBPartySwaps._unwrapAndSendBNB(address,uint256): External calls:
- WBNB.withdraw(unwrapAmount) External calls sending eth:
- _transferBNB(recipient,party.bonusTargetReach + party.bonusPartyCreator)
  - address(recipient).transfer(amount) Event emitted after the call(s):
- TransferOutBNB(recipient,amount)
  - _transferBNB(recipient,party.bonusTargetReach + party.bonusPartyCreator)

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartySwaps.sol#L13-L22

[ ] ID-8 Reentrancy in BNBPartySwaps._unwrapAndSendBNB(address,uint256): External calls:
- WBNB.withdraw(unwrapAmount) External calls sending eth:
- _transferBNB(recipient,party.bonusTargetReach)
  - address(recipient).transfer(amount) Event emitted after the call(s):
- TransferOutBNB(recipient,amount)
  - _transferBNB(recipient,party.bonusTargetReach)

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartySwaps.sol#L13-L22

[ ] ID-9 Reentrancy in BNBPartySwaps._unwrapAndSendBNB(address,uint256): External calls:
- WBNB.withdraw(unwrapAmount) External calls sending eth:
- _transferBNB(recipient,party.bonusTargetReach)
  - address(recipient).transfer(amount)
- _transferBNB(creator,party.bonusPartyCreator)
  - address(recipient).transfer(amount) Event emitted after the call(s):
- TransferOutBNB(recipient,amount)
  - _transferBNB(creator,party.bonusPartyCreator)

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartySwaps.sol#L13-L22

[ ] ID-10 Reentrancy in BNBPartyLiquidity._handleLiquidity(address): External calls:

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyLiquidity.sol#L14-L56

naming-convention

Impact: Informational Confidence: High

[ ] ID-11 Variable BNBPartyState.WBNB is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyState.sol#L27

[ ] ID-12 Variable BNBPartyState.BNBPositionManager is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyState.sol#L14

[ ] ID-13 Parameter BNBPartyManageable.setSwapRouter(ISwapRouter)._swapRouter is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyManageable.sol#L35

[ ] ID-14 Parameter BNBPartyManageable.setNonfungiblePositionManager(INonfungiblePositionManager,INonfungiblePositionManager)._BNBPositionManager is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyManageable.sol#L15

[ ] ID-15 Function INonfungiblePositionManager.WETH9() is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/interfaces/INonfungiblePositionManager.sol#L184

[ ] ID-16 Parameter BNBPartyManageable.setNonfungiblePositionManager(INonfungiblePositionManager,INonfungiblePositionManager)._positionManager is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyManageable.sol#L16

[ ] ID-17 Parameter BNBPartyManageable.setBNBPartySwapRouter(ISwapRouter)._swapRouter is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyManageable.sol#L29

[ ] ID-18 Variable BNBPartyState.BNBSwapRouter is not in mixedCase

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartyState.sol#L16

reentrancy-unlimited-gas

Impact: Informational Confidence: Medium

[ ] ID-19 Reentrancy in BNBPartySwaps._unwrapAndSendBNB(address,uint256): External calls:
- _transferBNB(recipient,party.bonusTargetReach)
  - address(recipient).transfer(amount)
- _transferBNB(creator,party.bonusPartyCreator)
  - address(recipient).transfer(amount) Event emitted after the call(s):
- TransferOutBNB(recipient,amount)
  - _transferBNB(creator,party.bonusPartyCreator)

https://github.com/bnb-party/BNBParty.Factory/blob/4856108ee176d3c8d1e74470a01c544ac8368972/contracts/BNBPartySwaps.sol#L13-L22