BugPull

A team led by @0xHuntoor and @Rzizah_ to pull bugs out of codes

[Hunter @Huntoor]

Alhamdulillah, i have won @QuantAMMDeFi contest.

It was one of the hardest contests to me, involving Tradefi papers/math intense implementation + balancerV3 hooks

People who actually knew me didn't doubt that it was coming

Found:
- 8 Highs
- 8 Mediums, 2 solo

Learned alot about BalancerV3 in general and specifically the hooks (and how its different from UniV4)

What an intuition that i get whenever i audit hook integrated protocols (UniV4/BalancerV3)

Thx @CodeHawks

Up from here

worth mentioning: that i have changed my twitter handle from @ililihunterlili to @huntoor too.

[Hunter @Huntoor]

https://t.co/QoAohklMWQ

[Hunter @Huntoor]

Small new achievement for @BugPull , finding all H/M in the code

Wen first place? @Rzizah_

This is starting to become not tasty at all

[Rzizah @Rzizah_]

We secured 7th place on OKU though we were very close to securing the 1st.
lessons learned:
- Write reports once found (if not ensure all tags have been reviewed correctly).
- Submit any issue (it might end up being a solo or the one that makes you win).
Thanks @sherlockdefi

[BugPull @BugPull]

As you can see, ToilerState Struct contains multiple variables.

During the function execution, we forget to update plotId.

this makes plotOccupied mapping contains a tokenId

while toilerState mapping reflect a tokenId with different plotId.

https://t.co/bx0XC1FZEN

[BugPull @BugPull]

The LandManager contract lets users place their munchables on other users’ plots🏞️to gain schnibbles.

It also offers a function to relocate a staked token between plots 🔄,

But this function has a bug, can you spot it? 🤔

[BugPull @BugPull]

The LandManager contract lets users place their munchables on other users’ plots🏞️to gain schnibbles.

It also offers a function to relocate a staked token between plots 🔄,

But this function has a bug, can you spot it? 🤔

[BugPull @BugPull]

@DrippyRobin 🫡

[BugPull @BugPull]

⏳ We were short on time.
💻Code was tough.
👨‍💻Contest was fully stacked by top auditors.
🏆 But we still were able to snag a top 5 place and a solo out of this war!