-
# Lines of code
https://github.com/code-423n4/2023-02-ethos/blob/main/Ethos-Core/contracts/LQTY/LQTYStaking.sol#L177
# Vulnerability details
## Impact
User can make collateral gain without staking…
-
# Handle
certora
# Vulnerability details
## Impact
frontrun Temporary Dos attack for the following functions:
lend, borrow.
## Proof of Concept
suppose Alice wants to use the lend function(same …
-
**Github username:** @cpp-phoenix
**Twitter username:** 0xrochimaru
**Submission hash (on-chain):** 0x5449411a24b6efa52386cb587ded49d6a30fe349192a179078138e898d39a293
**Severity:** medium
**Descript…
-
**Github username:** --
**Twitter username:** 0xgreed_
**Submission hash (on-chain):** 0x3f7185b31b76145295b532e703775b867e76c05615580f5ab675d2fa32de3cbd
**Severity:** medium
**Description:**
**Desc…
-
**Github username:** --
**Twitter username:** --
**Submission hash (on-chain):** 0x25bdc5b095d9c0a48bbd14b57946335f137f38214d574b2708bb43a371ee0dc1
**Severity:** medium
**Description:**
**Descriptio…
-
# Lines of code
https://github.com/code-423n4/2023-06-llama/blob/aac904d31639c1b4b4e97f1c76b9c0f40b8e5cee/src/LlamaCore.sol#L638
https://github.com/code-423n4/2023-06-llama/blob/aac904d31639c1b4b4e97…
-
# Lines of code
https://github.com/code-423n4/2022-03-joyn/blob/main/core-contracts/contracts/CoreFactory.sol#L70-L77
# Vulnerability details
## Impact
This is dangerous in scam senario because t…
-
# Handle
cmichel
# Vulnerability details
The `initialize` function that initializes important contract state can be called by anyone.
See:
- `ERC20VestedMine.initialize`
- `AuctionPool.initialize`…
-
# Handle
cmichel
# Vulnerability details
The `initialize` function that initializes important contract state can be called by anyone.
See:
- `MintableERC20.initialize`
- `PolygonERC20Wrapper.init…
-
# Handle
pants
# Vulnerability details
The function __UToken_init can be frontrun. We recommend adding an initializer owner which only it allowed to call such functions, instead of the current _ad…