Tribally-Games / arcade-contracts / 19882379709

98%

push

github

fix: add msg.value validation to UniversalDexDepositor

Addresses security audit findings M001 and M003:
- M001: Validate msg.value == 0 when depositing USDC/ERC20 tokens
  to prevent accidental ETH being trapped in contract
- M003: Validate msg.value == amountIn for native ETH deposits
  to prevent mismatch between declared and actual ETH sent

Added comprehensive test coverage for all validation scenarios.

47 of 51 branches covered (92.16%)

Branch coverage included in aggregate %.

4 of 4 new or added lines in 1 file covered. (100.0%)

202 of 203 relevant lines covered (99.51%)

11.35 hits per line