Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(lsp): remove duplicate transfer in factory #3523

Merged
merged 3 commits into from Nov 2, 2021
Merged

Conversation

chrismaree
Copy link
Member

Motivation

OZ audit identified the following issue:

The LongShortPair contract retrieves a proposer reward from whichever address triggers the expiration, which is used to incentivize price proposals in the Optimistic Oracle. However, the LongShortPairCreator contract also retrieves and forwards the funds from the deployer address. These additional funds are not passed to the Optimistic Oracle, and instead remain trapped within the LongShortPair contract.

To address this, the duplicate transfer in the factory was removed.

Testing

Check a box to describe how you tested these changes and list the steps for reviewers to test.

  • Ran end-to-end test, running the code as in production
  • New unit tests created
  • Existing tests adequate, no new tests required
  • All existing tests pass
  • Untested

Signed-off-by: chrismaree <christopher.maree@gmail.com>
Signed-off-by: chrismaree <christopher.maree@gmail.com>
Signed-off-by: chrismaree <christopher.maree@gmail.com>
@chrismaree chrismaree added the audit-fix-phase5 Fixes for Phase 5 of the OZ audit label Nov 1, 2021
Copy link
Member

@nicholaspai nicholaspai left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@chrismaree chrismaree changed the title lsp(audit): remove duplicate transfer in factory fix(lsp): remove duplicate transfer in factory Nov 1, 2021
@chrismaree chrismaree merged commit faf58ea into master Nov 2, 2021
@chrismaree chrismaree deleted the chrismaree/c02 branch November 2, 2021 08:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
audit-fix-phase5 Fixes for Phase 5 of the OZ audit
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants