-
# Lines of code
https://github.com/code-423n4/2023-11-kelp/blob/main/src/LRTDepositPool.sol#L109
# Vulnerability details
##root cause
The problem is that a user can know which direction the oracl…
-
scammed
Medium
# User can benefit from `emergencyWithdrawal` in case other tokens are added
## Summary
`emergencyWithdrawal` doesn’t check for the request’s token hash and will transfer from all t…
-
ArmedGoose
medium
# `Emergency repayment` and `takeOverDebt` rely on the same conditions as Liquidations, making them prone to frontrunning by liquidators
## Summary
Either `takeOverDebt` and `emerg…
-
# Lines of code
https://github.com/code-423n4/2023-08-dopex/blob/main/contracts/perp-vault/PerpetualAtlanticVault.sol#L502
# Vulnerability details
## Impact
The `PerpetualAtlanticVault.updateFundi…
-
# Lines of code
https://github.com/code-423n4/2023-11-kelp/blob/f751d7594051c0766c7ecd1e68daeb0661e43ee3/src/RSETH.sol#L54-L56
https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/blob/…
-
cawfree
high
# Griefing Vulnerability: The `MAXIMUM_NUMBER_OF_DEPOSITS_PER_ROUND` on future rounds can be wasted on zero-value deposits.
## Summary
Each round imposes a [`MAXIMUM_NUMBER_OF_DEPOSIT…
-
# Lines of code
https://github.com/Tapioca-DAO/tap-token-audit/blob/main/contracts/options/oTAP.sol#L126
# Vulnerability details
## Impact
The brokerClaim() function is susceptible to frontrunning…
-
# Lines of code
https://github.com/code-423n4/2023-10-ethena/blob/ee67d9b542642c9757a6b826c82d0cae60256509/contracts/StakedUSDe.sol#L176
https://github.com/code-423n4/2023-10-ethena/blob/ee67d9b54264…
-
LowK
medium
# Initialization of an ERC20Pool contract can be frontrun
## Summary
An ERC20Pool contract uses an initialize function instead of a constructor to init states of the contract. However, …
-
0x73696d616f
Medium
# `CCIPClient` `whenHealthy` modifier will lead to stuck `ETH` due to DoSing claim and cancel
### Summary
`CCIPClient` has a `whenHealthy` modifier in the `ccipSend()` function…