-
## Summary
The mint and deposit functions in VYToken.sol do not validate if the receiver parameter is a zero address. The standard OpenZeppelin's _mint function has a check for the zero address [Re…
-
We are a national streaming business trying to rewrite our ExoPlayer and Cast sender SDK specific implementations of playback and move to using the Media3 APIs instead to allow for more consistent cod…
-
**Context:** [GenericSwapFacetV3.sol#L142](https://github.com/lifinance/contracts/blob/581260dc5e2b8607273f202e54e0b2dbbcef59a6/src/Facets/GenericSwapFacetV3.sol#L142)
**Description:** The contract…
-
# Lines of code
https://github.com/code-423n4/2024-03-revert-lend/blob/main/src/V3Vault.sol#L372-L375
https://github.com/code-423n4/2024-03-revert-lend/blob/main/src/V3Vault.sol#L378-L381
https://git…
-
# Lines of code
https://github.com/code-423n4/2024-03-revert-lend/blob/435b054f9ad2404173f36f0f74a5096c894b12b7/src/V3Vault.sol#L360-L393
# Vulnerability details
## Impact
The functions `deposit()…
-
obront
medium
# All Rage Trade functions allow sending tokens to a different address, leading to incorrect tokensIn
## Summary
All three approved functions on Rage Trade (`depositTokens()`, `withd…
-
##Summary
The VRLadle contract contains a give() function that allows a vault owner to transfer their vault to another address:
```solidity
function give(
bytes12 vaultId_,
address re…
-
There are already static constants in Tact that can be declared outside of functions and receivers, but what about the possibility of defining constants within function bodies to enhance code?
Thes…
-
**Github username:** @0xbrett8571
**Twitter username:** 0xbrett8571
**Submission hash (on-chain):** 0x73587454e05e9e8fbfe5c2c66d9dd6118ce0cadfb825be22550da26c00fd29ff
**Severity:** medium
**Descript…
-
The ERC-4626 specifies for the `maxDeposit()` function on a vault: `MUST return the maximum amount of assets deposit would allow to be deposited for receiver and not cause a revert, which MUST NOT be …