issues
search
code-423n4
/
2022-05-factorydao-findings
1
stars
1
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Upgraded Q -> H from 94 [1655957384739]
#291
code423n4
closed
2 years ago
2
Upgraded Q -> H from 285 [1655952312863]
#290
code423n4
closed
2 years ago
1
Agreements & Disclosures
#289
CloudEllie
opened
2 years ago
0
Upgraded Q -> M from 198 [1654952432267]
#288
code423n4
closed
2 years ago
2
Upgraded Q -> M from 220 [1654424909577]
#287
code423n4
closed
2 years ago
3
Not all ERC20 tokens return boolean on transfer
#286
code423n4
closed
2 years ago
1
QA Report
#285
code423n4
opened
2 years ago
3
Attacker could make deposits of 1 wei in the yield contract to prevent excess rewards from being withdrawn
#284
code423n4
closed
2 years ago
1
PermissionlessBasicPoolFactory use hard coded decimals of 18
#283
code423n4
closed
2 years ago
2
Protocol unusable for some ERC20 tokens (bad tokens)
#282
code423n4
closed
2 years ago
1
Gas Optimizations
#281
code423n4
opened
2 years ago
1
QA Report
#280
code423n4
opened
2 years ago
2
Gas Optimizations
#279
code423n4
opened
2 years ago
2
Beneficiary of SpeedBumpPriceGate can close the gate and hike the price for free.
#278
code423n4
closed
2 years ago
2
QA Report
#277
code423n4
opened
2 years ago
1
Gas Optimizations
#276
code423n4
opened
2 years ago
1
QA Report
#275
code423n4
opened
2 years ago
2
Missing ERC20 return value check in `MerkleVesting#withdraw`
#274
code423n4
closed
2 years ago
1
QA Report
#273
code423n4
opened
2 years ago
2
Pools and trees may be underfunded for fee-on-transfer tokens
#272
code423n4
closed
2 years ago
1
`SpeedBumpPriceGate` does not refund excess ETH payment
#271
code423n4
closed
2 years ago
2
`FixedPricePassThruGate` locks excess ETH payments
#270
code423n4
closed
2 years ago
3
Re-entrancy attack on the main functions
#269
code423n4
closed
2 years ago
3
QA Report
#268
code423n4
opened
2 years ago
2
Unchecked return value of transferFrom() leading to zero cost RewardFunding
#267
code423n4
closed
2 years ago
1
QA Report
#266
code423n4
opened
2 years ago
2
QA Report
#265
code423n4
opened
2 years ago
1
Gas Optimizations
#264
code423n4
opened
2 years ago
2
Fee-On-Transfer Tokens Are Not Supported
#263
code423n4
closed
2 years ago
1
Creator of the contract could front run tax per capita to 100% of Yield rewards
#262
code423n4
closed
2 years ago
3
Transfers Will Revert On Non-Standard `ERC20` Token Contracts
#261
code423n4
closed
2 years ago
1
In withdraw() of MerkleIdentity if user set wrong value for merkleIndex, then `treeAdder` can perform front-running and steal user funds
#260
code423n4
closed
2 years ago
2
`setGlobalTax()` Can Be Manipulated By The Global Beneficiary To Steal Reward Tokens Or Censor Pool Creators
#259
code423n4
closed
2 years ago
2
Gas Optimizations
#258
code423n4
opened
2 years ago
2
Missing zero address check in constructor may lead to zero Tax
#257
code423n4
closed
2 years ago
2
Users Can Prevent Excess Tokens From Being Withdrawn By The Pool Creator In `withdrawExcessRewards()`
#256
code423n4
closed
2 years ago
3
If treeAdder call addMerkleTree() of MerkleIdentity with wrong values for eligibilityIndex or priceIndex (uninitialized) attacker can steal NFTs
#255
code423n4
closed
2 years ago
3
Not checking returned bool by transfer can lead to loss of funds
#254
code423n4
closed
2 years ago
1
Consistently check account balance before and after transfers for Fee-On-Transfer discrepancies
#253
code423n4
closed
2 years ago
1
Missing zero address check in constructor leading to loss of Tax
#252
code423n4
closed
2 years ago
1
QA Report
#251
code423n4
opened
2 years ago
2
Gas Optimizations
#250
code423n4
opened
2 years ago
1
Multiple vestings for the same user will fail
#249
code423n4
closed
2 years ago
2
Gas Optimizations
#248
code423n4
opened
2 years ago
2
ERC20 transfers does not work on non-standard compliant tokens like USDT
#247
code423n4
closed
2 years ago
1
Pool Creators Can Reject Taxes From Being Withdrawn
#246
code423n4
closed
2 years ago
3
In `MerkleVesting.sol::withdraw` check return value of ERC20 transfer or use `safeTransfer` of OZ
#245
code423n4
closed
2 years ago
2
`PermissionlessBasicPoolFactory.sol` Does Not Support Reward Tokens With Decimals Other Than 18
#244
code423n4
closed
2 years ago
2
`PermissionlessBasicPoolFactory.sol` Does Not Support Reward Tokens With Decimals Other Than 18
#243
code423n4
closed
2 years ago
3
if user call addMerkleTree() of MerkleIdentity with priceIndex==0 by mistake or other uninitialized gates, then attacker can steal all the NFTs with 0 payment
#242
code423n4
closed
2 years ago
2
Next