-
Tendency
High
# Unchecked `deposit_token` Allows Malicious Token Substitution During Withdrawals
### Summary
A verified withdrawal message can be maliciously intercepted, replacing the expected to…
-
Q7
Medium
# Missing signer check in `create_pool`
### Summary
According to the documentation, the `create_pool` instruction should only be callable by an admin. However, there is currently no chec…
-
g
Medium
# Only 1 Oracle can be created for a base token due to not including the quote token in the oracle's seeds
### Summary
The quote token, quote feed account, and quote price update are not …
-
# Smart Contract Development Status
## Current State
- Base contract implemented with 500 NFT supply limit
- Token integration configured
- Basic whitelist structure in place
## Critical Updates Nee…
-
- backend logic
-
Hi, I'm experiencing an issue here when send the transaction to the sendTransaction from the MobileAdapter, I have the following error:
```
WalletSendTransactionError: Found no installed wallet that…
-
shaflow01
High
# Allow anyone to create new Wooracles and Woopools
## Summary
The CreatePool and CreateWooracle functions lack sufficient permission verification, allowing anyone to create new poo…
-
## Severity
Critical Risk
## Description
The `ld2sd_rate` (local-to-shared decimal rate) can be manipulated by the initializer through the exploitation of the `MintCloseAuthority` extension i…
-
**Problem:**
It is possible to brake external programs which use token extension with transfer hook if it requires more than 6 additional extra account meta.
sdk function `invoke_transfer_checked`…
-
First, I have fulfilled the requirements of **mint token** outlined in the [Week-2 Assignment](https://github.com/TranSiTien/solana-bootcamp-autumn-2024/blob/main/week-2/assignment/README.md) by perfo…