search

code-423n4 / 2024-08-wildcat-findings

3 stars 1 forks source link

QA Report #2

Closed c4-bot-8 closed 2 months ago

c4-bot-8 commented 2 months ago

See the markdown file with the details of this report here.

laurenceday commented 2 months ago

This is a low-quality report in the sense that it doesn't demonstrate a particular example (even just linking to one of the functions in HooksConfig.sol and going 'look at all this assembly' would have been enough), or illustrate anywhere in code that such a memory corruption could take place in the absence of updating the free memory pointer. Rather, this is a 'well this could theoretically happen' report rather than indicating anything concrete within the actual protocol. It's a QA, sure, but so is 'use all caps for variable names'.

c4-judge commented 1 month ago

3docSec marked the issue as grade-c