-
Lis of necessary assets:
Native = 'Native',
Uniswap = 'Uniswap',
UniswapV2 = 'Uniswap_V2',
Eth2Dai = 'Eth2Dai',
Kyber = 'Kyber',
Curve = 'Curve',
LiquidityProvider = '…
-
# Handle
leastwood
# Vulnerability details
## Impact
All auction contracts except `BatchAuction.sol` do not verify that `fundsCommitted` is greater than zero when executing `withdrawTokens()`. Th…
-
# Handle
0xRajeev
# Vulnerability details
## Impact
If integratorFeePct is not reset via setter (where 1000 upper threshold is checked) but set only at init where the deployer assumes traditional…
-
# Handle
hrkrshnn
# Vulnerability details
## Unused state variable `barFee` and `_barFeeTo` in IndexPool
The public state variable
and
seems to be never used anywhere in the contract. Removing …
-
So I'm playing around with sushiswap's contracts and I noticed that the order the test files are run matter. I found this because I'm renaming sushiswap's contracts.
For example, if i just run `yar…
-
# Handle
0xRajeev
# Vulnerability details
## Impact
There is an external payable init() function in all four auction contracts which has an empty body and the comment seems to indicate that this …
-
Hi there,
I have a reference swap transaction on sushiswap matic exchange that can be found here: https://polygonscan.com/tx/0x27ca6dce7210626ab2c1fe8496b0619e1ae4c43ca70ae3d28675e863721e8a2f
Qu…
-
# Handle
JMukesh
# Vulnerability details
## Impact
There is no input validation of address in transfer() and transferFrom() in tridentErc20.sol due to which it , token can be send to the address…
-
This shows as a major time consumer in a few subgraphs including:
https://thegraph.com/hosted-service/subgraph/sushi-labs/users-polygon (Qma5YzDtseXGJfwt1dGMmRwMaqvbgdSgnprWSdnp5gQf3n)
https://thegr…
-
# Handle
JMukesh
# Vulnerability details
## Impact
Use of transfer() might render ETH impossible to withdraw becuase after istanbul hardfork , there is increases in the gas cost of the SLOAD ope…