apeswapfinance / apeswap-banana-farm Goto Github PK

Hello, I found a conditional competition vulnerability. I want to know how to submit vulnerability details and vulnerability reward rules. You can contact me through TG(@RedTeamPing).

I am trying studying this repo but when deploying MasterApe i got error like this `Error: *** Deployment Failed ***

"MasterApe" -- invalid address (argument="address", value=undefined, code=INVALID_ARGUMENT, version=address/5.0.5) (argument="_devaddr", value=undefined, code=INVALID_ARGUMENT, version=abi/5.0.0-beta.153).` any clue for me ? thanks

Context : I had set my initial allowance for MasterApe (0x5c8D727b265DBAfaba67E050f2f739cAeEB4A6F9) at 110 LP.
This morning I tried depositing ~9 LP to a farm where I had already deposited ~107 LP. When I tried depositing all of the LPs in my wallet, metamask presented an "Error alert: Contract internal error" : if the transaction was sent, it would revert with a 'ds-math-sub-underflow' error ( one of the transactions I had sent : https://bscscan.com/tx/0x17c876e66d11985673fd971378c34d93afb0388dd0a8b2bb1b2d4452bc90a26c).

The frontend should notify the user if the deposit he's trying to do will generate a deposited amount greater than the allowance previously set. This will make interactions with Apeswap a lot clearer and less frustrating for less experienced users.