Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Gas: shadow pools are only required for burn types #12

Open
code423n4 opened this issue Oct 13, 2021 · 1 comment
Open

Gas: shadow pools are only required for burn types #12

code423n4 opened this issue Oct 13, 2021 · 1 comment
Labels
bug Warden finding G (Gas Optimization) sponsor confirmed Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

Comments

@code423n4
Copy link
Contributor

Handle

cmichel

Vulnerability details

The PoolCommiter.shadowPools track commitments for all four Long/Short Mint/Burn types and uses these to reconstruct the initial total supply to correctly compute the token amounts for the sequence of commitments (as short/long tokens already get burned in the commitment phase and reduced the total supply).
However, the two burn types LongBurn and ShortBurn are all that's needed for the reconstruction which can be seen from the fact that shadowPools[.] is only accessed with them.

Recommendation

Only store shadowPools for LongBurn and ShortBurn types, and remove the shadowPools[_commitType] = shadowPools[_commitType] - _commit.amount; statement in _uncommit which is unnecessary for the mints as it just pays out what's already tracked in the commitments (_commit).

code423n4 added a commit that referenced this issue Oct 13, 2021
@CalabashSquash CalabashSquash added the sponsor confirmed Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity") label Oct 17, 2021
@GalloDaSballo
Copy link
Collaborator

Agree with the finding, avoid interacting with storage when unnecessary for sizeable gas savings

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Warden finding G (Gas Optimization) sponsor confirmed Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")
Projects
None yet
Development

No branches or pull requests

3 participants