A place for developers to talk about building on Farcaster.

/dev

If you're a Solidity dev and interested in helping out Degen by auditing or reviewing our Locked Degen ERC-20 contract, we'd love your support. Your help in finding bugs or suggesting code improvements would be greatly appreciated! Thanks!

If you're a Solidity dev and interested in helping out Degen by auditing or reviewing our Locked Degen ERC-20 contract, we'd love your support. Your help in finding bugs or suggesting code improvements would be greatly appreciated! Thanks!

https://github.com/degen-token/degen-smart-contracts/pull/22

some people is asking about it.. and I had to stop my audit.. after found it..

LN 130 - updateLockDuration() function 
This allow the owner to change the locking period.. between 0-365 days.

LN 118 - if (block.timestamp <= depositTimestamps[msg.sender] + lockDuration) revert...

This check on lockDuration in the withdraw function allows the owner to do some tricks with the locking period: 
 - the owner could lock and unlock by managing to do a sandwich: updateLockFunction-withdraw-updateLockFunction, withdrawing without respecting the lock. And, setting it again locking users funds.
- the owner could extend the locking period, from an initial 0 days to 1 year. Locking user funds for 1 year without user "permission".

Alchemist. 
Block Builder. 
Creator.
Degen. 
Ethereum dev. 
Farcaster Framer.

intersubjective mechanism design @ poidh.xyz - come chill /poidh + follow @poidhbot