code-423n4 / 2022-05-rubicon-findings

5 stars 2 forks source link

Upgraded Q -> M from 207 [1656344422031] #505

Closed code423n4 closed 2 years ago

code423n4 commented 2 years ago

Judge has assessed an item in Issue #207 as Medium risk. The relevant finding follows:

HickupHH3 commented 2 years ago
  1. Use strict equality in RubiconRouter Payable functions in RubiconRouter use a loose check msg.value >= amount, which opens up the possibility to send more ETH than necessary, potentially causing users to lose fund when interacting with faulty front-end.

dup of #15