ZhangZhuoSJTU / Web3Bugs

Demystifying Exploitable Bugs in Smart Contracts

1.53k stars 208 forks source link

Adding bugs for 2022-12-caviar #2

Open ZhangZhuoSJTU opened 1 year ago

ZhangZhuoSJTU commented 1 year ago

Adding newly disclosed code4rena contest bugs.

Contest

Contest: Caviar

Contract Code: https://github.com/code-423n4/2022-12-caviar

Number of High Risk Findings: 3

Number of Wardens: 130

Bugs

[x] [H-01] Reentrancy in buy function for ERC777 tokens allows buying funds with considerable discount - L1
[x] [H-02] Liquidity providers may lose funds when adding liquidity - S1-2
[x] [H-03] First depositor can break minting of shares - O3

ZhangZhuoSJTU commented 1 year ago

Leave this issue open as a reference.