-
Notifications
You must be signed in to change notification settings - Fork 3.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(ctp): Drippie Spearbit audit fixes #3280
Conversation
🦋 Changeset detectedLatest commit: eb2c556 The changes in this PR will be included in the next version bump. This PR includes changesets to release 2 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
779d3d3
to
a1072f9
Compare
Fixes Spearbit issue 45, saves gas by using calldata parameters instead of memory parameters.
Fixes Spearbit issue 44, documents the count variable and increments count before external calls.
Fixes Spearbit issue 42, saves gas by removing extra SLOADs.
Fixes Spearbit issue 35, corrects contract layout ordering.
Fixes Spearbit issue 34, adds natspec where incomplete.
Fixes Spearbit issues 32 and 33, clarifies the behavior of the executable function to revert instead of returning false, and removes an unnecessary check as a result.
Fixes Spearbit issue 31, requires explicit opt-in for reentrant drip execution.
Fixes Spearbit issue 28, better documentation of the behavior of execution checks in the drip function.
Fixes Spearbit issue 21, use MIT licensed version of Solmate.
Fixes Spearbit issue 25, reorders DripStatus enum for clarity.
Fixes Spearbit issue 24, use call with value over transfer to avoid future gas issues.
Fixes Spearbit issue 22, removes unnecessary gas parameter.
Fixes Spearbit issue 39, updates Solidity to latest version.
a1072f9
to
1247b2b
Compare
@tynes can you please review? Don't want this to go stale. |
This PR has been added to the merge queue, and will be merged soon. |
This PR is next in line to be merged, and will be merged as soon as checks pass. |
Description
Includes individual commits for each audit issue that I felt was worth fixing. No "high" or "critical" severity bugs were found as part of the audit and making this PR public does not put any existing funds at risk.