issues
search
Cyfrin
/
2023-07-foundry-defi-stablecoin
37
stars
32
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Chainlink Oracle may return incorrect price (zero, outside min/max range)
#1104
codehawks-bot
opened
1 year ago
0
Potential for reentrancy attacks
#1103
codehawks-bot
closed
1 year ago
0
Unverified Sequencer Status in Data Validation
#1102
codehawks-bot
opened
1 year ago
1
Improper staleness validation
#1101
codehawks-bot
opened
1 year ago
0
`burnDsc` function allows undercollateralized users to burn their dsc and avoid liquidation.
#1100
codehawks-bot
closed
1 year ago
1
Replace `transferFrom()` with `safeTransferFrom()`
#1099
codehawks-bot
closed
1 year ago
1
Potential Arithmetic Underflow in redeemCollateral Function Due to Insufficient Pre-Withdrawal Checks
#1098
codehawks-bot
opened
1 year ago
1
Unchecked Price Range: A Potential Exploit in Chainlink Aggregator Use
#1097
codehawks-bot
opened
1 year ago
0
There is no incentive to liquidate small positions
#1096
codehawks-bot
opened
1 year ago
4
`latestRoundData()` does not check round completeness
#1095
codehawks-bot
opened
1 year ago
0
Lack of the input validation to check for the amount of collateral to be repaid (`amountCollateral`), which lead to that the excess amount of collateral would be stuck in the SC forever
#1094
codehawks-bot
closed
1 year ago
1
x - y is more efficient than using -=
#1093
codehawks-bot
opened
1 year ago
0
use unchecked ++i in loops
#1092
codehawks-bot
opened
1 year ago
0
Unvalidated Token and Pricefeed Addresses: A Risk to Smart Contract Functionality
#1091
codehawks-bot
opened
1 year ago
0
Chainlink does not always return 8 decimals
#1090
codehawks-bot
opened
1 year ago
1
Error in the liquidate() function
#1089
codehawks-bot
closed
1 year ago
1
Public `burnFrom()` function can cause serious unintended behaviour of the system
#1088
codehawks-bot
opened
1 year ago
0
IERC20 interface doesnt work for some tokens like USDT
#1087
codehawks-bot
closed
1 year ago
1
tokenCollateralAddress not checked
#1086
codehawks-bot
closed
1 year ago
2
Risk of incorrect WBTC pricing due to possible WBTC depegs from BTC
#1085
codehawks-bot
opened
1 year ago
0
Missing slippage parameter, depositCollateralAndMintDsc() can be front-runned
#1084
codehawks-bot
closed
1 year ago
0
There is no way to recover collateral tokens accumulated on the dscEngine contract as a result of liquidation transactions
#1083
codehawks-bot
closed
1 year ago
1
chainlink latestrounddata can still return stale or incorrect results
#1082
codehawks-bot
opened
1 year ago
0
nonReentrant modifier should come first
#1081
codehawks-bot
opened
1 year ago
0
No check if L2 sequencer is down in Chainlink feeds
#1080
codehawks-bot
opened
1 year ago
0
Using the collateral assets' oracle price at 100% of its value to mint DSC without a fee can be used for arbitrage
#1079
codehawks-bot
closed
1 year ago
1
getUsdValue returns incorrect value for collateral with different decimals than 18
#1078
codehawks-bot
opened
1 year ago
0
The owner is a single point of failure and a centralization risk
#1077
codehawks-bot
closed
1 year ago
1
Fee-On-Transfer tokens (such as USDT) as collateral support
#1076
codehawks-bot
opened
1 year ago
0
No address(0) check
#1075
codehawks-bot
opened
1 year ago
0
Vulnerability with Multiple Entrypoint Tokens in DSCEngine.sol Contract
#1074
codehawks-bot
closed
1 year ago
1
Incompatibility with transfer-on-fee or deflationary tokens
#1073
codehawks-bot
opened
1 year ago
0
Unchecked return data `roundId` from Chainlink aggregators
#1072
codehawks-bot
opened
1 year ago
0
Lack of a double-step `transferOwnership()` pattern
#1071
codehawks-bot
closed
1 year ago
1
Unsafe to use floating pragma
#1070
codehawks-bot
opened
1 year ago
0
Functions calling contracts/addresses with transfer hooks are missing reentrancy guards
#1069
codehawks-bot
closed
1 year ago
1
Using unchecked blocks to save gas
#1068
codehawks-bot
opened
1 year ago
0
Inability to Withdraw Remaining Funds When All DSC is Redeemed
#1067
codehawks-bot
closed
1 year ago
1
Conformance to Solidity naming conventions
#1066
codehawks-bot
closed
1 year ago
1
Lack of Liquidation Mechanism When Peg is Lost
#1065
codehawks-bot
closed
1 year ago
1
Inability to Withdraw Excess Reserves
#1064
codehawks-bot
closed
1 year ago
1
Should use latest solidity version `0.8.21` for gas reduction and improved security.
#1063
codehawks-bot
closed
1 year ago
1
staleCheckLatestRoundData does not work properly if the update intervals(heartbeats) of the oracles are different
#1062
codehawks-bot
opened
1 year ago
0
Missed `onlyOwner` modifier for `burnFrom()`
#1061
codehawks-bot
opened
1 year ago
0
The increment `++i/i++` in `for-loop`/`while-loop` post condition can be made `unchecked{++i}/unchecked{i++}`
#1060
codehawks-bot
opened
1 year ago
0
Usage of `uints`/`ints` smaller than 32 bytes (256 bits) incurs overhead
#1059
codehawks-bot
closed
1 year ago
1
Cache state variables instead of rereading
#1058
codehawks-bot
closed
1 year ago
0
Remove unused parameter variables
#1057
codehawks-bot
opened
1 year ago
1
Amounts should be checked for `0` before calling a `transfer`
#1056
codehawks-bot
opened
1 year ago
0
Use assembly to check for `address(0)`
#1055
codehawks-bot
opened
1 year ago
0
Previous
Next