Upgraded Q -> 2 from #167 [1727128717282] #171
Labels
2 (Med Risk)
Assets not at direct risk, but function/availability of the protocol could be impacted or leak value
duplicate-8
satisfactory
satisfies C4 submission criteria; eligible for awards
Judge has assessed an item in Issue #167 as 2 risk. The relevant finding follows:
[LOW-3] No function to set the
fee_protocol
of a pool:Uniswap v3 has a function that let's the factory owner to set the protocol's fee denominator value for a pool. However, no such function exists in pool.rs. However, the pool storage contains the fee_protocol var:
https://github.com/code-423n4/2024-08-superposition/blob/main/pkg/seawater/src/pool.rs#L31
Therefore, the protocol won't be able to collect fee on the swap operations that would take place.
Recommended Mitigation Steps:
Add a function that would let the admin set the fee_protocol variable.
[LOW-4] No use of seconds and tick_cumulative values of a tick:
The tick.rs contains the following in its storage:
https://github.com/code-423n4/2024-08-superposition/blob/main/pkg/seawater/src/tick.rs#L54
However, these values are never set and used by the protocol. These values are basically maintained by uniswap v3 for other external contracts to use.
Recommended Mitigation Steps:
It is recommended to remove these storage vars if there are not to be used.
The text was updated successfully, but these errors were encountered: