Kinetic Disclosed Report

Audit report Kinetic Audit Contest

`Comptroller` expecting `getUnderlyingPrice` to return `0` for errors

Company
Created date
Jan 21 2025

Target

https://github.com/kinetic-market/public-money-market-contracts

Vulnerability Details

Compound style protocols excepts 0 when there is any revert in the transaction. The implementation of getUnderlyingPrice will throw errors, resulting in consumer of the oracle getting unexpected errors.

Validation steps

Consider using try/catch and return 0 when reverts.

CommentsReport History
Comments on this report are hidden
Details
Statedisclosed
Severity
None
Bounty$143
Visibilitypartially
VulnerabilityDoS with (Unexpected) revert
Participants (3)
company admin