Open code423n4 opened 1 year ago
L03 and R02 are interesting.
isEthToken
should return false when _addr == 0
L
L
SystemContractHelper.getZkSyncMeta
does not include heapSize and auxHeapSizeR
L2EthToken.mint
natspecNC
L2EthToken.transferFromTo
does not trigger callbacks in docsR
NC
NC
See N-04
L2EthToken.withdraw
can accept amount
instead of msg.value
R
NonceHolder.incrementDeploymentNonce
has redundant access control checkR
ContractDeployer.updateNonceOrdering
can only change to ArbitraryR
1L from dups
2L 5R 3NC
3L 5R 3NC
GalloDaSballo marked the issue as grade-a
See the markdown file with the details of this report here.