code-423n4 / 2022-06-putty-findings

5 stars 0 forks source link

Upgraded Q -> M from 333 [1657814353016] #440

Closed code423n4 closed 1 year ago

code423n4 commented 1 year ago

Judge has assessed an item in Issue #333 as Medium risk. The relevant finding follows:

HickupHH3 commented 1 year ago

In fillOrder function and exercise function, the case when the order base asset is not WETH and the msg.value > 0 makes user losing ether. Consider transfers the ether amount not needed back to users, or let users withdraw it.

dup of #226