code-423n4 / 2021-06-gro-findings

0 stars 1 forks source link

`Buoy3Pool._updateRatios` unsafe math #105

Open code423n4 opened 3 years ago

code423n4 commented 3 years ago

Handle

cmichel

Vulnerability details

Vulnerability Details

The function performs type conversions and subtraction without over-/underflow checks:

uint256 check = abs(int256(_ratio) - int256(chainRatios[i].div(CHAIN_FACTOR)));

Recommended Mitigation Steps

We recommend checking if the values fit within the type range first, otherwise revert with a meaningful error message, as well as checking for underflows.

kitty-the-kat commented 2 years ago

6

ghoul-sol commented 2 years ago

This is partially a duplicate of #6 but it focuses on low risk issue so I'll record is as a separate (low risk) issue.