-
### Required prerequisites
- [X] I have searched the [Issue Tracker](https://github.com/camel-ai/camel/issues) and [Discussions](https://github.com/camel-ai/camel/discussions) that this hasn't alread…
-
mt030d
high
# Attackers can front-run the ZivoeYDL.distributeYield() function and call returnAsset() to prevent the available yield in YDL from being distributed to the appropriate recipients
## …
-
### Verify steps
- [X] Is this something you can **debug and fix**? Send a pull request! Bug fixes and documentation fixes are welcome.
- [X] I have searched on the [issue tracker](……/) for a related…
-
fandonov
high
# The user will lose all of his rewards.
## Summary
The user will lose all of his rewards.
## Vulnerability Detail
Let's say the user stakes tokens for himself, and the amount he spe…
-
Dots
high
# User can't get rewards if he exits early
## Summary
User can't get rewards if he exits early
## Vulnerability Detail
According to the sponsor, exiting early should stop the accumulation…
-
Atharv
medium
# Loss of Rewards for User Due to Failure to Update Rewards Before Claiming
## Summary
Users may lose out on rewards because the getReward() function does not update unseen rewards be…
-
Bauer
high
# `distributeYield()` may be front-run by bad actors to steal reward
## Summary
In the `distributeYield()` function, the protocol deposits rewards into the corresponding contract and the…
-
air_0x
high
# Ineffective slippage check due to Incorrect order of operation in the panic() function .
## Summary
The function `panic()` in the `StrategyPassiveManagerVelodrome` contract handl…
-
### Describe the issue
Attempting to create a simple QA RAG chat between the `RetrieveUserProxyAgent` and `AssistantAgent`. I will provide my code below, however note that I am using one textbook i…
-
Timenov
medium
# User can send `distributedAsset` to DAO.
## Summary
The `ZivoeYDL` contract is used to manage the accounting for distributing yield across multiple contracts. The `distributeYield`…