·
We finished the Sukukfi contest on Code4rena, unfotunately we were starting to understand how it all works but we ran out of time, better luck next time! 0xfirefist only audited one of the in-scope contracts and managed to come up with 2 submissions. Many new things learned, the base is set! Onto the next one!
Lesson Summary:
- TasksDo weird things with the 3-step flows. Try to think of different scenarios and call sequences. See if sth screws up.
- Go through a specific flow only when you already know the contracts in-scope, that is, when you have understand them on a decent level.
- ERC20 transfer(update) can hide a bug if the update function isn't using storage, but memory - only the last change happens, previous are ignored. So must check if self transfers can inflate balance.