Skip to content
Request an audit

‹ Findings database

In OstiumLinkUpKeep, empty watchlist or keeperIds arguments are not handled

Low/InfoOstium audit·Three Sigma·RWA perpetuals DEX·19th February, 20243S-OS-L15

Description

In OstiumLinkUpKeep, functions setWatchList(), addToWatchList() and removeFromWatchList() don't handle 0 length array inputs, which could lead to incorrect state.

Recommendation

Explicitly check for empty arrays.

Status

Addressed in #c9ebe98.

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests