code-423n4 2022-05-alchemix-findings issues

code-423n4 / 2022-05-alchemix-findings

5 stars 2 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Agreements & Disclosures

#230 CloudEllie opened 2 years ago
0
a DoS is generated in migrate Source due to relinquishing ownership.

#229 code423n4 closed 2 years ago
2
QA Report

#228 code423n4 opened 2 years ago
2
adding a bridge token does not update all storage variables

#227 code423n4 closed 2 years ago
3
QA Report

#226 code423n4 opened 2 years ago
0
Gas Optimizations

#225 code423n4 opened 2 years ago
1
Gas Optimizations

#224 code423n4 opened 2 years ago
1
QA Report

#223 code423n4 opened 2 years ago
2
TransmuterBuffer.sol calls depositUnderlying with no slippage bounds

#222 code423n4 opened 2 years ago
2
QA Report

#221 code423n4 opened 2 years ago
0
Gas Optimizations

#220 code423n4 opened 2 years ago
0
Gas Optimizations

#219 code423n4 opened 2 years ago
1
QA Report

#218 code423n4 opened 2 years ago
1
QA Report

#217 code423n4 closed 2 years ago
1
Gas Optimizations

#216 code423n4 opened 2 years ago
0
QA Report

#215 code423n4 opened 2 years ago
1
Gas Optimizations

#214 code423n4 opened 2 years ago
0
Gas Optimizations

#213 code423n4 opened 2 years ago
0
QA Report

#212 code423n4 opened 2 years ago
0
QA Report

#211 code423n4 opened 2 years ago
0
Free Flash fee due to missing zero value check in AlchemicTokenV2.sol

#210 code423n4 closed 2 years ago
2
[AlchemistV2.sol] donate function fails when 1 person occupies the total shares of specific yieldToken

#209 code423n4 closed 2 years ago
2
Free Flash fee due to zero value check in AlchemicTokenV2Base.sol

#208 code423n4 closed 2 years ago
2
Missing input validation on maximum parameter may not allow minter to mint in AlchemicTokenV2Base.sol

#207 code423n4 closed 2 years ago
2
Missing input validation on maximum parameter may not allow minter to mint in AlchemicTokenV1.sol

#206 code423n4 closed 2 years ago
3
Gas Optimizations

#205 code423n4 opened 2 years ago
0
QA Report

#204 code423n4 opened 2 years ago
0
No check transferFrom() return value

#203 code423n4 closed 2 years ago
2
Gas Optimizations

#202 code423n4 opened 2 years ago
0
QA Report

#201 code423n4 opened 2 years ago
1
QA Report

#200 code423n4 opened 2 years ago
0
[AlchemicTokenV2.sol] flashLoan function can be called by the paused minter

#199 code423n4 closed 2 years ago
2
[gALCX.sol] Attacker can make the contract unusable when totalSupply is 0

#198 code423n4 opened 2 years ago
2
Gas Optimizations

#197 code423n4 opened 2 years ago
0
Gas Optimizations

#196 code423n4 opened 2 years ago
0
Gas Optimizations

#195 code423n4 opened 2 years ago
1
Gas Optimizations

#194 code423n4 closed 2 years ago
1
QA Report

#193 code423n4 opened 2 years ago
0
`setDivertToAmo()` should confirm `amos[underlyingToken] != address(0)`

#192 code423n4 closed 2 years ago
3
`setWeights()` should confirm `tokens.length == weights.length`

#191 code423n4 closed 2 years ago
2
`setTokenAdapter()` doesn’t call `_checkSupportedUnderlyingToken()` to check whether underlyingToken is supported

#190 code423n4 closed 2 years ago
2
Malicious admin can launch a front-running attack to steal tokens in `harvest()`

#189 code423n4 closed 2 years ago
2
Gas Optimizations

#188 code423n4 opened 2 years ago
0
There should be a cap on `protocolFee`

#187 code423n4 closed 2 years ago
2
`CrossChainCanonicalGALCX` is not a `gALCX`

#186 code423n4 closed 2 years ago
2
Malicious owner can launch a front-running attack to steal tokens in `exchangeOldForCanonical()` and `exchangeCanonicalForOld()`

#185 code423n4 closed 2 years ago
2
There should be a cap on `swapFees[bridgeTokenAddress]`

#184 code423n4 closed 2 years ago
2
Owner can take bridgeToken unconditionally in `recoverERC20()`

#183 code423n4 closed 2 years ago
4
LOW-LEVEL CALLS SUCCEEDING FOR NON-EXISTENT CONTRACT

#182 code423n4 closed 2 years ago
3
There should be a cap on `flashMintFee`

#181 code423n4 closed 2 years ago
2