code-423n4 / 2021-09-sushimiso-findings

0 stars 0 forks source link

Missing Events on State Changing Functions #31

Open code423n4 opened 3 years ago

code423n4 commented 3 years ago

Handle

leastwood

Vulnerability details

Impact

Events are used by off-chain participants to track on-chain state changes. There are several functions that don't emit events:

There are potentially other functions also lacking the use of events.

Proof of Concept

https://github.com/sushiswap/miso/blob/master/contracts/Access/ListFactory.sol#L137-L139 https://github.com/sushiswap/miso/blob/master/contracts/MISOLauncher.sol

Tools Used

Slither

Recommended Mitigation Steps

Consider adding an event to reflect any state changes made within a contract.

Clearwood commented 2 years ago

This is true but state changes can be monitored without events, does not constitute a security problem

ghoul-sol commented 2 years ago

making this a non-critical as it is best practices recommendation