fix reentrancy-no-eth slither warning

[YouStillAlive]

No description provided.

[github-actions]

Methods

Symbol	Meaning
◯	Execution gas for this method does not include intrinsic gas overhead
△	Cost was non-zero but below the precision setting for the currency display (see options)

	Min	Max	Avg	Calls	usd avg
BNBPartyFactory
createParty(string,string)	5,728,901	5,905,663	5,764,366	36	15.74
joinParty(address,uint256)	143,964	5,709,444	2,080,549	26	5.68
leaveParty(address,uint256,uint256)	177,880	203,218	183,548	5	0.50
pause()	-	-	46,851	5	0.13
setBNBPartySwapRouter(address)	24,135	46,275	45,045	18	0.12
setNonfungiblePositionManager(address,address)	27,416	68,950	66,640	18	0.18
setSwapRouter(address)	-	-	46,298	16	0.13
unpause()	-	-	24,885	5	0.07
withdrawFee()	-	-	31,766	2	0.09
withdrawLPFee(address[])	-	-	173,618	1	0.47
withdrawPartyLPFee(address[])	-	-	173,798	2	0.47
NonfungiblePositionManager
approve(address,uint256)	46,052	46,395	46,303	4	0.13
SwapRouter
exactInput((bytes,address,uint256,uint256,uint256))	135,887	145,445	142,259	3	0.39
multicall(bytes[])	-	-	163,901	2	0.45

Deployments

	Min	Max	Avg	Block %	usd avg
BNBPartyFactory	3,704,885	3,704,897	3,704,896	2.8 %	10.12
MockContract	-	-	107,813	0.1 %	0.29
MockNonfungibleTokenPositionDescriptor	-	-	111,329	0.1 %	0.30
NonfungiblePositionManager	5,171,500	5,171,524	5,171,518	4 %	14.12
SqrtPriceCalculator	-	-	278,712	0.2 %	0.76
SwapRouter	2,201,066	2,201,090	2,201,085	1.7 %	6.01
UniswapV3Factory	5,437,097	5,437,109	5,437,108	4.2 %	14.85

Solidity and Network Config

Settings	Value
Solidity: version	0.8.26
Solidity: optimized	true
Solidity: runs	200
Solidity: viaIR	false
Block Limit	130,000,000
L1 Gas Price	5 gwei
Token Price	546.15 usd/bnb
Network	BINANCE
Toolchain	hardhat

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

All modified and coverable lines are covered by tests ✅

❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Files with missing lines	Coverage Δ
contracts/BNBPartyCreation.sol	100.00% <100.00%> (ø)
contracts/BNBPartyFactory.sol	100.00% <100.00%> (ø)
contracts/BNBPartyLiquidity.sol	100.00% <100.00%> (ø)

[github-actions]

Slither report

THIS CHECKLIST IS NOT COMPLETE. Use --show-ignored-findings to show all the results.
Summary

• unused-return (6 results) (Medium)
• reentrancy-benign (1 results) (Low)
• reentrancy-events (4 results) (Low)
• naming-convention (8 results) (Informational)
• reentrancy-unlimited-gas (1 results) (Informational)

unused-return

Impact: Medium
Confidence: Medium

• ID-0
  BNBPartyLiquidity._handleLiquidity(address) ignores return value by (sqrtPriceX96,None,None,None,None,None,None) = pool.slot0()

BNBParty.Factory/contracts/BNBPartyLiquidity.sol

Lines 14 to 56 in 24fb39c

	function _handleLiquidity(address recipient) internal returns (address liquidityPool, uint256 tokenId){
	IUniswapV3Pool pool = IUniswapV3Pool(msg.sender);
	(uint160 sqrtPriceX96, , , , , , ) = pool.slot0();
	address token0 = pool.token0();
	address token1 = pool.token1();
	uint128 liquidity = pool.liquidity();
	uint256 unwrapAmount = party.bonusTargetReach + party.bonusPartyCreator + party.targetReachFee;
	uint160 newSqrtPriceX96;
	// Decrease liquidity and collect tokens
	(uint256 amount0, uint256 amount1) = _decreaseAndCollect(lpToTokenId[msg.sender], liquidity);
	if (token0 == address(WBNB)) {
	amount0 -= unwrapAmount; // Deduct unwrap amount from token0 if it is WBNB
	isTokenOnPartyLP[token1] = false;
	newSqrtPriceX96 = sqrtPriceCalculator.getNextSqrtPriceFromAmount0RoundingUp(
	sqrtPriceX96,
	liquidity,
	unwrapAmount,
	false
	);
	} else {
	amount1 -= unwrapAmount; // Deduct unwrap amount from token1 if it is WBNB
	isTokenOnPartyLP[token0] = false;
	newSqrtPriceX96 = sqrtPriceCalculator.getNextSqrtPriceFromAmount1RoundingDown(
	sqrtPriceX96,
	liquidity,
	unwrapAmount,
	false
	);
	}
	// Approve tokens for the new liquidity pool creation
	IERC20(token0).safeIncreaseAllowance(address(positionManager), amount0);
	IERC20(token1).safeIncreaseAllowance(address(positionManager), amount1);
	// Create new Liquidity Pool
	(liquidityPool, tokenId) = _createLP(positionManager, token0, token1, amount0, amount1, newSqrtPriceX96, party.lpFee, _getTicks(token0, party.lpTicks));
	// Send bonuses
	_unwrapAndSendBNB(recipient, unwrapAmount);
	// burn meme tokens
	_burnMemeToken(token0 == address(WBNB) ? token1 : token0);
	}

• ID-1
  BNBPartyLiquidityHelper._decreaseAndCollect(uint256,uint128) ignores return value by BNBPositionManager.collect(INonfungiblePositionManager.CollectParams({tokenId:tokenId,recipient:address(this),amount0Max:uint128(amount0),amount1Max:uint128(amount1)}))

BNBParty.Factory/contracts/BNBPartyLiquidityHelper.sol

Lines 16 to 40 in 24fb39c

	function _decreaseAndCollect(
	uint256 tokenId,
	uint128 liquidity
	) internal returns (uint256 amount0, uint256 amount1) {
	// Decrease liquidity from the position and receive the amount of token0 and token1
	(amount0, amount1) = BNBPositionManager.decreaseLiquidity(
	INonfungiblePositionManager.DecreaseLiquidityParams({
	tokenId: tokenId,
	liquidity: liquidity,
	amount0Min: 0, // Minimum amount of token0 to collect, set to 0 for flexibility
	amount1Min: 0, // Minimum amount of token1 to collect, set to 0 for flexibility
	deadline: block.timestamp // Deadline for the transaction to be completed
	})
	);
	// Collect the tokens from the position after liquidity decrease
	BNBPositionManager.collect(
	INonfungiblePositionManager.CollectParams({
	tokenId: tokenId,
	recipient: address(this), // Collect tokens to this contract address
	amount0Max: uint128(amount0), // Maximum amount of token0 to collect
	amount1Max: uint128(amount1) // Maximum amount of token1 to collect
	})
	);
	}

• ID-2
  BNBPartyCreation._createLP(INonfungiblePositionManager,address,address,uint256,uint256,uint160,uint24,IBNBPartyFactory.Ticks) ignores return value by (tokenId,None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:ticks.tickLower,tickUpper:ticks.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp}))

BNBParty.Factory/contracts/BNBPartyCreation.sol

Lines 43 to 77 in 24fb39c

	function _createLP(
	INonfungiblePositionManager liquidityManager,
	address token0,
	address token1,
	uint256 amount0,
	uint256 amount1,
	uint160 sqrtPriceX96,
	uint24 fee,
	Ticks memory ticks
	) internal returns (address liquidityPool, uint256 tokenId) {
	// Create LP
	liquidityPool = liquidityManager.createAndInitializePoolIfNecessary(
	token0,
	token1,
	fee,
	sqrtPriceX96
	);
	// Mint LP
	(tokenId, , , ) = liquidityManager.mint(
	INonfungiblePositionManager.MintParams({
	token0: token0,
	token1: token1,
	fee: fee,
	tickLower: ticks.tickLower,
	tickUpper: ticks.tickUpper,
	amount0Desired: amount0,
	amount1Desired: amount1,
	amount0Min: 0,
	amount1Min: 0,
	recipient: address(this),
	deadline: block.timestamp
	})
	);
	}

• ID-3
  BNBPartyManageable._collectFee(address,INonfungiblePositionManager) ignores return value by manager.collect(INonfungiblePositionManager.CollectParams({tokenId:lpToTokenId[liquidityPool],recipient:msg.sender,amount0Max:type()(uint128).max,amount1Max:type()(uint128).max}))

BNBParty.Factory/contracts/BNBPartyManageable.sol

Lines 93 to 105 in 24fb39c

	function _collectFee(
	address liquidityPool,
	INonfungiblePositionManager manager
	) internal notZeroAddress(liquidityPool) {
	manager.collect(
	INonfungiblePositionManager.CollectParams({
	tokenId: lpToTokenId[liquidityPool],
	recipient: msg.sender,
	amount0Max: type(uint128).max,
	amount1Max: type(uint128).max
	})
	); // Collects fees from the specified liquidity pool
	}

• ID-4
  BNBPartySwaps._executeSwap(ISwapRouter,ISwapRouter.ExactInputParams) ignores return value by ISwapRouter(router).exactInput{value: value}(params)

BNBParty.Factory/contracts/BNBPartySwaps.sol

Lines 47 to 53 in 24fb39c

	function _executeSwap(
	ISwapRouter router,
	ISwapRouter.ExactInputParams memory params
	) internal notZeroAddress(address(router)) {
	uint256 value = msg.value > 0 ? params.amountIn : 0; // Set value if msg.value is greater than zero
	ISwapRouter(router).exactInput{value: value}(params); // Executes the swap
	}

• ID-5
  BNBPartyFee._getFeeGrowthInsideLastX128(IUniswapV3Pool,bytes32) ignores return value by (None,feeGrowthInside0LastX128,feeGrowthInside1LastX128,None,None) = pool.positions(key)

BNBParty.Factory/contracts/BNBPartyFee.sol

Lines 70 to 82 in 24fb39c

	function _getFeeGrowthInsideLastX128(
	IUniswapV3Pool pool,
	bytes32 key
	)
	internal
	view
	returns (
	uint256 feeGrowthInside0LastX128,
	uint256 feeGrowthInside1LastX128
	)
	{
	(, feeGrowthInside0LastX128, feeGrowthInside1LastX128, , ) = pool.positions(key);
	}

reentrancy-benign

Impact: Low
Confidence: Medium

• ID-6
  Reentrancy in BNBPartyLiquidity._handleLiquidity(address):
  External calls:
  • (amount0,amount1) = _decreaseAndCollect(lpToTokenId[msg.sender],liquidity)
    • (amount0,amount1) = BNBPositionManager.decreaseLiquidity(INonfungiblePositionManager.DecreaseLiquidityParams({tokenId:tokenId,liquidity:liquidity,amount0Min:0,amount1Min:0,deadline:block.timestamp}))
    • BNBPositionManager.collect(INonfungiblePositionManager.CollectParams({tokenId:tokenId,recipient:address(this),amount0Max:uint128(amount0),amount1Max:uint128(amount1)}))
      State variables written after the call(s):
  • isTokenOnPartyLP[token1] = false
  • isTokenOnPartyLP[token0] = false

BNBParty.Factory/contracts/BNBPartyLiquidity.sol

Lines 14 to 56 in 24fb39c

	function _handleLiquidity(address recipient) internal returns (address liquidityPool, uint256 tokenId){
	IUniswapV3Pool pool = IUniswapV3Pool(msg.sender);
	(uint160 sqrtPriceX96, , , , , , ) = pool.slot0();
	address token0 = pool.token0();
	address token1 = pool.token1();
	uint128 liquidity = pool.liquidity();
	uint256 unwrapAmount = party.bonusTargetReach + party.bonusPartyCreator + party.targetReachFee;
	uint160 newSqrtPriceX96;
	// Decrease liquidity and collect tokens
	(uint256 amount0, uint256 amount1) = _decreaseAndCollect(lpToTokenId[msg.sender], liquidity);
	if (token0 == address(WBNB)) {
	amount0 -= unwrapAmount; // Deduct unwrap amount from token0 if it is WBNB
	isTokenOnPartyLP[token1] = false;
	newSqrtPriceX96 = sqrtPriceCalculator.getNextSqrtPriceFromAmount0RoundingUp(
	sqrtPriceX96,
	liquidity,
	unwrapAmount,
	false
	);
	} else {
	amount1 -= unwrapAmount; // Deduct unwrap amount from token1 if it is WBNB
	isTokenOnPartyLP[token0] = false;
	newSqrtPriceX96 = sqrtPriceCalculator.getNextSqrtPriceFromAmount1RoundingDown(
	sqrtPriceX96,
	liquidity,
	unwrapAmount,
	false
	);
	}
	// Approve tokens for the new liquidity pool creation
	IERC20(token0).safeIncreaseAllowance(address(positionManager), amount0);
	IERC20(token1).safeIncreaseAllowance(address(positionManager), amount1);
	// Create new Liquidity Pool
	(liquidityPool, tokenId) = _createLP(positionManager, token0, token1, amount0, amount1, newSqrtPriceX96, party.lpFee, _getTicks(token0, party.lpTicks));
	// Send bonuses
	_unwrapAndSendBNB(recipient, unwrapAmount);
	// burn meme tokens
	_burnMemeToken(token0 == address(WBNB) ? token1 : token0);
	}

reentrancy-events

Impact: Low
Confidence: Medium

• ID-7
  Reentrancy in BNBPartySwaps._unwrapAndSendBNB(address,uint256):
  External calls:
  • WBNB.withdraw(unwrapAmount)
    External calls sending eth:
  • _transferBNB(recipient,party.bonusTargetReach + party.bonusPartyCreator)
    • address(recipient).transfer(amount)
      Event emitted after the call(s):
  • TransferOutBNB(recipient,amount)
    • _transferBNB(recipient,party.bonusTargetReach + party.bonusPartyCreator)

BNBParty.Factory/contracts/BNBPartySwaps.sol

Lines 13 to 22 in 24fb39c

	function _unwrapAndSendBNB(address recipient, uint256 unwrapAmount) internal {
	address creator = lpToCreator[msg.sender];
	WBNB.withdraw(unwrapAmount); // Unwrap WBNB to BNB
	if (recipient == creator) {
	_transferBNB(recipient, party.bonusTargetReach + party.bonusPartyCreator); // Send total bonus to creator
	} else {
	_transferBNB(recipient, party.bonusTargetReach); // Send bonus to recipient
	_transferBNB(creator, party.bonusPartyCreator); // Send bonus to creator
	}
	}

• ID-8
  Reentrancy in BNBPartySwaps._unwrapAndSendBNB(address,uint256):
  External calls:
  • WBNB.withdraw(unwrapAmount)
    External calls sending eth:
  • _transferBNB(recipient,party.bonusTargetReach)
    • address(recipient).transfer(amount)
      Event emitted after the call(s):
  • TransferOutBNB(recipient,amount)
    • _transferBNB(recipient,party.bonusTargetReach)

BNBParty.Factory/contracts/BNBPartySwaps.sol

Lines 13 to 22 in 24fb39c

	function _unwrapAndSendBNB(address recipient, uint256 unwrapAmount) internal {
	address creator = lpToCreator[msg.sender];
	WBNB.withdraw(unwrapAmount); // Unwrap WBNB to BNB
	if (recipient == creator) {
	_transferBNB(recipient, party.bonusTargetReach + party.bonusPartyCreator); // Send total bonus to creator
	} else {
	_transferBNB(recipient, party.bonusTargetReach); // Send bonus to recipient
	_transferBNB(creator, party.bonusPartyCreator); // Send bonus to creator
	}
	}

• ID-9
  Reentrancy in BNBPartySwaps._unwrapAndSendBNB(address,uint256):
  External calls:
  • WBNB.withdraw(unwrapAmount)
    External calls sending eth:
  • _transferBNB(recipient,party.bonusTargetReach)
    • address(recipient).transfer(amount)
  • _transferBNB(creator,party.bonusPartyCreator)
    • address(recipient).transfer(amount)
      Event emitted after the call(s):
  • TransferOutBNB(recipient,amount)
    • _transferBNB(creator,party.bonusPartyCreator)

BNBParty.Factory/contracts/BNBPartySwaps.sol

Lines 13 to 22 in 24fb39c

	function _unwrapAndSendBNB(address recipient, uint256 unwrapAmount) internal {
	address creator = lpToCreator[msg.sender];
	WBNB.withdraw(unwrapAmount); // Unwrap WBNB to BNB
	if (recipient == creator) {
	_transferBNB(recipient, party.bonusTargetReach + party.bonusPartyCreator); // Send total bonus to creator
	} else {
	_transferBNB(recipient, party.bonusTargetReach); // Send bonus to recipient
	_transferBNB(creator, party.bonusPartyCreator); // Send bonus to creator
	}
	}

• ID-10
  Reentrancy in BNBPartyLiquidity._handleLiquidity(address):
  External calls:
  • (amount0,amount1) = _decreaseAndCollect(lpToTokenId[msg.sender],liquidity)
    • (amount0,amount1) = BNBPositionManager.decreaseLiquidity(INonfungiblePositionManager.DecreaseLiquidityParams({tokenId:tokenId,liquidity:liquidity,amount0Min:0,amount1Min:0,deadline:block.timestamp}))
    • BNBPositionManager.collect(INonfungiblePositionManager.CollectParams({tokenId:tokenId,recipient:address(this),amount0Max:uint128(amount0),amount1Max:uint128(amount1)}))
  • IERC20(token0).safeIncreaseAllowance(address(positionManager),amount0)
  • IERC20(token1).safeIncreaseAllowance(address(positionManager),amount1)
  • (liquidityPool,tokenId) = _createLP(positionManager,token0,token1,amount0,amount1,newSqrtPriceX96,party.lpFee,_getTicks(token0,party.lpTicks))
    • liquidityPool = liquidityManager.createAndInitializePoolIfNecessary(token0,token1,fee,sqrtPriceX96)
    • (tokenId,None,None,None) = liquidityManager.mint(INonfungiblePositionManager.MintParams({token0:token0,token1:token1,fee:fee,tickLower:ticks.tickLower,tickUpper:ticks.tickUpper,amount0Desired:amount0,amount1Desired:amount1,amount0Min:0,amount1Min:0,recipient:address(this),deadline:block.timestamp}))
  • _unwrapAndSendBNB(recipient,unwrapAmount)
    • WBNB.withdraw(unwrapAmount)
      External calls sending eth:
  • _unwrapAndSendBNB(recipient,unwrapAmount)
    • address(recipient).transfer(amount)
      Event emitted after the call(s):
  • TransferOutBNB(recipient,amount)
    • _unwrapAndSendBNB(recipient,unwrapAmount)

BNBParty.Factory/contracts/BNBPartyLiquidity.sol

Lines 14 to 56 in 24fb39c

	function _handleLiquidity(address recipient) internal returns (address liquidityPool, uint256 tokenId){
	IUniswapV3Pool pool = IUniswapV3Pool(msg.sender);
	(uint160 sqrtPriceX96, , , , , , ) = pool.slot0();
	address token0 = pool.token0();
	address token1 = pool.token1();
	uint128 liquidity = pool.liquidity();
	uint256 unwrapAmount = party.bonusTargetReach + party.bonusPartyCreator + party.targetReachFee;
	uint160 newSqrtPriceX96;
	// Decrease liquidity and collect tokens
	(uint256 amount0, uint256 amount1) = _decreaseAndCollect(lpToTokenId[msg.sender], liquidity);
	if (token0 == address(WBNB)) {
	amount0 -= unwrapAmount; // Deduct unwrap amount from token0 if it is WBNB
	isTokenOnPartyLP[token1] = false;
	newSqrtPriceX96 = sqrtPriceCalculator.getNextSqrtPriceFromAmount0RoundingUp(
	sqrtPriceX96,
	liquidity,
	unwrapAmount,
	false
	);
	} else {
	amount1 -= unwrapAmount; // Deduct unwrap amount from token1 if it is WBNB
	isTokenOnPartyLP[token0] = false;
	newSqrtPriceX96 = sqrtPriceCalculator.getNextSqrtPriceFromAmount1RoundingDown(
	sqrtPriceX96,
	liquidity,
	unwrapAmount,
	false
	);
	}
	// Approve tokens for the new liquidity pool creation
	IERC20(token0).safeIncreaseAllowance(address(positionManager), amount0);
	IERC20(token1).safeIncreaseAllowance(address(positionManager), amount1);
	// Create new Liquidity Pool
	(liquidityPool, tokenId) = _createLP(positionManager, token0, token1, amount0, amount1, newSqrtPriceX96, party.lpFee, _getTicks(token0, party.lpTicks));
	// Send bonuses
	_unwrapAndSendBNB(recipient, unwrapAmount);
	// burn meme tokens
	_burnMemeToken(token0 == address(WBNB) ? token1 : token0);
	}

naming-convention

Impact: Informational
Confidence: High

• ID-11
  Variable BNBPartyState.WBNB is not in mixedCase

BNBParty.Factory/contracts/BNBPartyState.sol

Line 27 in 24fb39c

IWBNB public immutable WBNB; // Wrapped BNB token contract

• ID-12
  Variable BNBPartyState.BNBPositionManager is not in mixedCase

BNBParty.Factory/contracts/BNBPartyState.sol

Line 14 in 24fb39c

INonfungiblePositionManager public BNBPositionManager; // BNB Party position manager

• ID-13
  Parameter BNBPartyManageable.setSwapRouter(ISwapRouter)._swapRouter is not in mixedCase

BNBParty.Factory/contracts/BNBPartyManageable.sol

Line 35 in 24fb39c

ISwapRouter _swapRouter

• ID-14
  Parameter BNBPartyManageable.setNonfungiblePositionManager(INonfungiblePositionManager,INonfungiblePositionManager)._BNBPositionManager is not in mixedCase

BNBParty.Factory/contracts/BNBPartyManageable.sol

Line 15 in 24fb39c

INonfungiblePositionManager _BNBPositionManager,

• ID-15
  Function INonfungiblePositionManager.WETH9() is not in mixedCase

BNBParty.Factory/contracts/interfaces/INonfungiblePositionManager.sol

Line 184 in 24fb39c

function WETH9() external view returns (address);

• ID-16
  Parameter BNBPartyManageable.setNonfungiblePositionManager(INonfungiblePositionManager,INonfungiblePositionManager)._positionManager is not in mixedCase

BNBParty.Factory/contracts/BNBPartyManageable.sol

Line 16 in 24fb39c

INonfungiblePositionManager _positionManager

• ID-17
  Parameter BNBPartyManageable.setBNBPartySwapRouter(ISwapRouter)._swapRouter is not in mixedCase

BNBParty.Factory/contracts/BNBPartyManageable.sol

Line 29 in 24fb39c

ISwapRouter _swapRouter

• ID-18
  Variable BNBPartyState.BNBSwapRouter is not in mixedCase

BNBParty.Factory/contracts/BNBPartyState.sol

Line 16 in 24fb39c

ISwapRouter public BNBSwapRouter; // V3 swap router

reentrancy-unlimited-gas

Impact: Informational
Confidence: Medium

• ID-19
  Reentrancy in BNBPartySwaps._unwrapAndSendBNB(address,uint256):
  External calls:
  • _transferBNB(recipient,party.bonusTargetReach)
    • address(recipient).transfer(amount)
  • _transferBNB(creator,party.bonusPartyCreator)
    • address(recipient).transfer(amount)
      Event emitted after the call(s):
  • TransferOutBNB(recipient,amount)
    • _transferBNB(creator,party.bonusPartyCreator)

BNBParty.Factory/contracts/BNBPartySwaps.sol

Lines 13 to 22 in 24fb39c

	function _unwrapAndSendBNB(address recipient, uint256 unwrapAmount) internal {
	address creator = lpToCreator[msg.sender];
	WBNB.withdraw(unwrapAmount); // Unwrap WBNB to BNB
	if (recipient == creator) {
	_transferBNB(recipient, party.bonusTargetReach + party.bonusPartyCreator); // Send total bonus to creator
	} else {
	_transferBNB(recipient, party.bonusTargetReach); // Send bonus to recipient
	_transferBNB(creator, party.bonusPartyCreator); // Send bonus to creator
	}
	}