issues
search
code-423n4
/
2021-04-vader-findings
1
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Transfer fee is burned on wrong accounts
#220
code423n4
opened
3 years ago
2
Interest debt is capped after a year
#219
code423n4
opened
3 years ago
1
`flashProof` is not flash-proof
#218
code423n4
opened
3 years ago
1
Tokens can be stolen through `transferTo`
#217
code423n4
opened
3 years ago
4
Repaying debt can be sandwich-attacked
#216
code423n4
closed
3 years ago
2
Swap value can be manipulated allowing under-collateralized loans
#215
code423n4
closed
3 years ago
1
Wrong `calcAsymmetricShare` calculation
#214
code423n4
opened
3 years ago
2
getAnchorPrice potentially returns the wrong median
#213
code423n4
opened
3 years ago
2
Replacing an anchor does not reset `Pool.isAnchor`
#212
code423n4
opened
3 years ago
2
Anyone can list anchors / curate tokens
#211
code423n4
opened
3 years ago
1
Anyone can curate pools and steal rewards
#210
code423n4
opened
3 years ago
2
Wrong slippage protection on Token -> Token trades
#209
code423n4
opened
3 years ago
2
Missing access restriction on `lockUnits/unlockUnits`
#208
code423n4
opened
3 years ago
1
4 Synths can be minted with fake base token
#207
code423n4
opened
3 years ago
2
`getAddedAmount` can return wrong results
#206
code423n4
opened
3 years ago
2
Swap token can be traded as fake base token
#205
code423n4
opened
3 years ago
1
Wrong liquidity units calculation
#204
code423n4
opened
3 years ago
1
Uninitialized variable leads to zero-fees for first transfer in Vader.sol
#203
code423n4
opened
3 years ago
0
Incorrect burn address in Vader.sol
#202
code423n4
opened
3 years ago
1
Anyone Can Call Init() and Lock It Forever For Attack.sol, DAO.sol, Factory.sol, Pools.sol, Router.sol, Vault.sol, and Vader.sol
#201
code423n4
closed
3 years ago
1
Gas Optimization: DAO.sol Unnecessary Multiple Return Statements
#200
code423n4
opened
3 years ago
1
Gas Optimization: Utils.sol Make An Unnecessary Multiplication And Division By An Identical Value
#199
code423n4
opened
3 years ago
1
Gas Optimization: Vader.sol Unnecessary Conditional #2
#198
code423n4
closed
3 years ago
2
Gas Optimization: Vader.sol Unnecessary Conditional
#197
code423n4
opened
3 years ago
1
Users Can Trivially Bypass Transfer Fees By Wrapping Vader/Vether Tokens
#196
code423n4
closed
3 years ago
2
transferTo() When Used By A Smart Contract Wallet Tranfers The Relayer's Funds Rather Than The Wallet's Funds.
#195
code423n4
closed
3 years ago
2
Gas Optimization: in Vader.sol, Turn Variables _1m, maxSupply, and decimals, into Constants/Immutable variables
#194
code423n4
closed
3 years ago
2
The Calculation For nextEraTime Drifts, Causing Eras To Occur Further And Further Into The Future
#193
code423n4
opened
3 years ago
0
Vader.sol secondsPerEra Is Currently Initiaalized To One Second Instead Of One Day
#192
code423n4
closed
3 years ago
1
Gas Optimization: Avoid Unnecessary Expensive SSTORE Calls In Vether.sol By Checking If _fee Is Non-Zero
#191
code423n4
opened
3 years ago
1
Gas Optimization: Remove Overflow Check in Vether.sol Since Solidity 0.8.x Disallows Implicit Overflows
#190
code423n4
opened
3 years ago
0
Anyone Can Avoid All Vether Transfer Fees By Adding Their Address to the Vether ExcludedAddresses List.
#189
code423n4
opened
3 years ago
2
Lack of emission of event after sensitive action
#188
code423n4
closed
3 years ago
1
Flash loans can affect governance voting in DAO.sol
#187
code423n4
opened
3 years ago
2
Unnecessary logic that will never get triggered in DAO.sol
#186
code423n4
opened
3 years ago
1
A minority of the DAO can cause DoS by canceling all proposals in DAO.sol
#185
code423n4
closed
3 years ago
3
Lack of input validation lets anyone cancel any finalising proposal in DAO.sol
#184
code423n4
closed
3 years ago
3
Undefined behavior for DAO and GRANT vote proposals in DAO.sol
#183
code423n4
opened
3 years ago
1
Perform early input validation of zero-address for efficiency in DAO.sol
#182
code423n4
opened
3 years ago
1
Gas savings by replacing public visibility with internal/private for isEqual() function of DAO.sol
#181
code423n4
opened
3 years ago
0
Gas savings by replacing public visibility with external for hasMinority() function of DAO.sol
#180
code423n4
closed
3 years ago
2
Gas savings by replacing public visibility with external for hasQuorum() function of DAO.sol
#179
code423n4
closed
3 years ago
2
Gas savings by replacing public visibility with external for hasMajority() function of DAO.sol
#178
code423n4
closed
3 years ago
2
Gas savings by replacing public visibility with external for finaliseProposal() function of DAO.sol
#177
code423n4
closed
3 years ago
2
Gas savings by replacing public visibility with external for cancelProposal() function of DAO.sol
#176
code423n4
closed
3 years ago
2
Gas savings by replacing public visibility with external for voteProposal() function of DAO.sol
#175
code423n4
closed
3 years ago
2
Gas savings by replacing public visibility with external for newAddressProposal() function of DAO.sol
#174
code423n4
closed
3 years ago
2
Gas savings by replacing public visibility with external for newGrantProposal() function of DAO.sol
#173
code423n4
closed
3 years ago
2
Missing event for critical init() function in DAO.sol
#172
code423n4
closed
3 years ago
1
Gas savings by converting storage variables to immutable by moving initialization from init() function to constructor in DAO.sol
#171
code423n4
closed
3 years ago
1
Previous
Next