code-423n4 / 2021-06-tracer-findings

1 stars 0 forks source link

todos left in the code #12

Open code423n4 opened 3 years ago

code423n4 commented 3 years ago

Handle

gpersoon

Vulnerability details

Impact

There are several todos left in the code.

Proof of Concept

.\Pricing.sol: // todo by using public variables lots of these can be removed .\Trader.sol: // todo this could be succeptible to re-entrancy as .\lib\LibLiquidation.sol: // todo with the below * -1, note ints can overflow as 2^-127 is valid but 2^127 is not. .\lib\LibPrices.sol: // todo double check safety of this.

Tools Used

Recommended Mitigation Steps

Check, fix and remove the todos before it is deployed in production