Lucene search
+L

2 matches found

Code423n4
Code423n4
added 2023/10/06 12:00 a.m.7 views

Existing pools will be bricked due to uninitialized state

Lines of code Vulnerability details Existing pools will be bricked due to uninitialized Summary Pools already present in the exchange will be bricked when crossTicks is called with an uninitialized tickTracking storage, which will trigger an array out of bounds error. Impact New pools in the...

7.3AI score
SaveExploits0
Code423n4
Code423n4
added 2023/10/06 12:00 a.m.30 views

Lack of validation allows invalid ticks, impacting data integrity.

Lines of code Vulnerability details Impact Function crossTicks updates the tick tracking data when ticks are crossed, but does not validate that exitTick and entryTick are valid and make sense. For example, exitTick could be lower than entryTick. Proof of Concept Here is the relevant code in the...

7AI score
SaveExploits0
Rows per page
Query Builder