Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

QA Report #83

Closed
howlbot-integration bot opened this issue Nov 4, 2024 · 3 comments
Closed

QA Report #83

howlbot-integration bot opened this issue Nov 4, 2024 · 3 comments
Labels
bug Something isn't working grade-c QA (Quality Assurance) Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax sufficient quality report This report is of sufficient quality unsatisfactory does not satisfy C4 submission criteria; not eligible for awards

Comments

@howlbot-integration
Copy link

howlbot-integration bot commented Nov 4, 2024

See the markdown file with the details of this report here.

@howlbot-integration howlbot-integration bot added bug Something isn't working QA (Quality Assurance) Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax sufficient quality report This report is of sufficient quality labels Nov 4, 2024
howlbot-integration bot added a commit that referenced this issue Nov 4, 2024
@c4-judge
Copy link

alex-ppg marked the issue as grade-c

@c4-judge c4-judge added grade-c unsatisfactory does not satisfy C4 submission criteria; not eligible for awards labels Nov 11, 2024
@JeffCX
Copy link

JeffCX commented Nov 12, 2024

I politely think the QA report should not only be graded based on quantity, but quality as well

because I see other report that marked as grade-b has a lot of false positive - I mean if the finding is about a piece of code that is not changed from uniswap v3, the code should stays that way and it is not a bug.

also something finding are captured by bot and should be OOS, a example is:

https://github.com/code-423n4/2024-10-ronin/blob/main/4naly3er-report.md#m-3--solmates-safetransferlib-does-not-check-for-token-contracts-existence

(II am not saying those grade-b report are all invalid because one OOS finding, again I just think that the QA report should not only be graded based on quantity, but quality as well)

I politely think the report deserves a grade b because it provide some insight that no other report provides.

https://github.com/code-423n4/2024-10-ronin-findings/blob/main/data/minglei-wang-3570-Q.md

@alex-ppg
Copy link

Hey @JeffCX, thanks for your PJQA contribution. The new QA guidelines indicate that only low-risk submissions are considered valid for assessing a grade. The first item in the QA report is not a low-risk item nor is one to be considered as the code has already copied Uniswap V3.

The second item is once again incorrect as it mimics the original codebase and no scenario has been demonstrated whereby the underflow may occur.

The third item is once again behavior in the original Uniswap V3 codebase that is generally acceptable and cannot constitute a low-risk item.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working grade-c QA (Quality Assurance) Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax sufficient quality report This report is of sufficient quality unsatisfactory does not satisfy C4 submission criteria; not eligible for awards
Projects
None yet
Development

No branches or pull requests

3 participants