issues
search
code-423n4
/
2021-04-maple-findings
0
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Bypass or reduction on the lockup period of Pool FDTs.
#117
code423n4
opened
3 years ago
1
Unnecessary `transferOwnership` funciton call in `MplRewards.sol` and `oracle/ChainlinkOracle.sol`.
#116
code423n4
closed
3 years ago
1
Potential reentrancy when the borrower drawdowns the loan.
#115
code423n4
opened
3 years ago
2
Bypass or reduction on the lockup period.
#114
code423n4
closed
3 years ago
1
Functions calculating the value of `BPT` is vulnerable to flash-loan attacks.
#113
code423n4
opened
3 years ago
3
Full payment does not consider late fees of the payment
#112
code423n4
opened
3 years ago
5
Any valid liquidator can arbitrage from the loan contract to earn collateral assets by exploiting the maximum slippage when defaulting a loan.
#111
code423n4
closed
3 years ago
2
Oracle not checked if set for an asset
#110
code423n4
opened
3 years ago
2
Slippage should not be allowed to be set to very high values
#109
code423n4
closed
3 years ago
3
Not ERC20 Compliant
#108
code423n4
opened
3 years ago
1
FundsWithdrawn event emitted when amount withdrawn is 0
#107
code423n4
closed
3 years ago
1
Default slippage value too high
#106
code423n4
opened
3 years ago
4
Uniswap DOS
#105
code423n4
opened
3 years ago
1
Contract MplRewards should have an emergency withdraw function
#104
code423n4
closed
3 years ago
2
getRewardForDuration will start returning misleading results if rewardsDuration is updated
#103
code423n4
opened
3 years ago
1
contract MapleTreasury should not allow to reclaim fundsToken
#102
code423n4
closed
3 years ago
1
zero cooldown should be explicitly allowed as per comment
#101
code423n4
closed
3 years ago
1
LoanLib.unwind uses globals.fundingPeriod()
#100
code423n4
opened
3 years ago
1
Function triggerDefault should call _emitBalanceUpdateEventForCollateralLocker
#99
code423n4
opened
3 years ago
1
Interface and implementation function declaration differs
#98
code423n4
opened
3 years ago
1
Unused code
#97
code423n4
opened
3 years ago
2
Comment indicates that FundsWithdrawn event should be emitted only when _withdrawableDividend > 0
#96
code423n4
opened
3 years ago
1
Testing form after deploy
#95
code423n4
closed
3 years ago
0
Griefing attack on pool creation in PoolFactory.sol
#94
code423n4
opened
3 years ago
1
Griefing attack on loan creation in LoanFactory.sol
#93
code423n4
opened
3 years ago
1
Potential huge arbitrage opportunities / MPL price decrease
#92
code423n4
opened
3 years ago
2
MPL USDC distributions can be withdrawn by anyone
#91
code423n4
opened
3 years ago
2
MPL reward claims of balancer pools can be exploited
#90
code423n4
opened
3 years ago
2
Allowance Double-Spend Exploit
#89
code423n4
opened
3 years ago
1
Possible sandwich-attack when treasury converts tokens
#88
code423n4
opened
3 years ago
4
Missing non-zero check
#87
code423n4
opened
3 years ago
3
Missing index on events
#86
code423n4
opened
3 years ago
1
Missing check on `setManualPrice(int256 _price)`
#85
code423n4
opened
3 years ago
3
Wrong docs on UsdOracle
#84
code423n4
opened
3 years ago
2
Chainlink Price oracle always assumes 8 decimals
#83
code423n4
opened
3 years ago
3
Chainlink Price data could be stale
#82
code423n4
opened
3 years ago
3
Missing check in deposit Pool
#81
code423n4
closed
3 years ago
1
Fields stuck after initialization
#80
code423n4
closed
3 years ago
1
Unnecessary check for `uint256 >= 0`
#79
code423n4
opened
3 years ago
3
Unused variable in `PoolLib.handleDefault`
#78
code423n4
opened
3 years ago
1
Outdated Compiler
#77
code423n4
opened
3 years ago
1
Use of mapping in place of array in `PoolFactory` and `LoanFactory`
#76
code423n4
opened
3 years ago
1
Using precalculated value in the Pool & Loan contracts
#75
code423n4
opened
3 years ago
1
Unnecessary initialization variable
#74
code423n4
closed
3 years ago
1
Optimising Factory contracts by using structs
#73
code423n4
opened
3 years ago
1
Event emission inconsistent with NatSpec comment in ERC2222.sol
#72
code423n4
opened
3 years ago
1
Inconsistent NatSpec comment in Pool.sol
#71
code423n4
opened
3 years ago
1
Inconsistent NatSpec comment in Pool.sol
#70
code423n4
opened
3 years ago
1
Missing event for critical operation of setAdmin change in Pool.sol
#69
code423n4
opened
3 years ago
1
Missing check for Pool state on several functions in Pool.sol
#68
code423n4
opened
3 years ago
3
Next