issues
search
code-423n4
/
2022-10-thegraph-findings
0
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Gas Optimizations
#215
code423n4
opened
1 year ago
0
Gas Optimizations
#214
code423n4
closed
1 year ago
0
Pause functionality locks funds if applied to only one gateway
#213
code423n4
closed
1 year ago
1
QA Report
#212
code423n4
closed
1 year ago
0
Loss of 'msg.value' in `L1GraphTokenGateway.finalizeInboundTransfer()`
#211
code423n4
closed
1 year ago
5
Fungibility of `GRT` can be affected by `burn()`
#210
code423n4
closed
1 year ago
2
Gas Optimizations
#209
code423n4
opened
1 year ago
0
Admin rug vector in `BridgeEscrow`
#208
code423n4
closed
1 year ago
2
Gas Optimizations
#207
code423n4
closed
1 year ago
0
Unchecked token transfer with callhook
#206
code423n4
closed
1 year ago
1
Gas Optimizations
#205
code423n4
closed
1 year ago
0
Gas Optimizations
#204
code423n4
closed
1 year ago
0
QA Report
#203
code423n4
closed
1 year ago
1
`L1GraphTokenGateway`, `L2GraphTokenGateway` does not enforce to set all the necessary variables before unpause
#202
code423n4
closed
1 year ago
2
`L1GraphTokenGateway:onlyL2Counterpart` does not check whether l2Counterpart is initialized
#201
code423n4
closed
1 year ago
7
`L2GraphToken` proxy owner cannot be relinquished (deviation from the spec)
#200
code423n4
closed
1 year ago
4
`L1GraphTokenGateway`: whitelisted entity cannot use callhook via router
#199
code423n4
closed
1 year ago
4
`L1GraphTokenGateway` should not allow `l1Router` as `callhookWhitelist`
#198
code423n4
opened
1 year ago
3
QA Report
#197
code423n4
closed
1 year ago
1
Gas Optimizations
#196
code423n4
opened
1 year ago
0
The token bridging transaction may be stuck in the bridge.
#195
code423n4
closed
1 year ago
4
Gas Optimizations
#194
code423n4
opened
1 year ago
0
QA Report
#193
code423n4
closed
1 year ago
1
finalizeInboundTransfer() may have reentrant attacking risk
#192
code423n4
closed
1 year ago
2
Gas Optimizations
#191
code423n4
opened
1 year ago
0
QA Report
#190
code423n4
closed
1 year ago
0
add the Success return value to transferfrom
#189
code423n4
closed
1 year ago
0
Gas Optimizations
#188
code423n4
opened
1 year ago
0
Governor can approve many spenders to spend unlimited amount in ```BridgeEscrow``` contract
#187
code423n4
closed
1 year ago
1
Adding new minter addresses creates risks
#186
code423n4
closed
1 year ago
0
QA Report
#185
code423n4
opened
1 year ago
1
Gas Optimizations
#184
code423n4
opened
1 year ago
1
Signature replay in `GraphTokenUpgradeable.permit`
#183
code423n4
closed
1 year ago
4
Contracts without GAP can lead a upgrade disaster
#182
code423n4
closed
1 year ago
2
QA Report
#181
code423n4
closed
1 year ago
1
Compromised Arbitrum: No Sanity/Security Checks on Amount in finalizeInboundTransfer() on Layer 2
#180
code423n4
closed
1 year ago
1
Compromised Arbitrum: No Sanity/Security Checks on Amount in finalizeInboundTransfer() on Layer 1
#179
code423n4
closed
1 year ago
3
Unlucky Gas Parameters Could Trap Tokens
#178
code423n4
closed
1 year ago
3
QA Report
#177
code423n4
closed
1 year ago
0
Return value of `transferFrom()` not checked
#176
code423n4
closed
1 year ago
0
QA Report
#175
code423n4
closed
1 year ago
0
Gas Optimizations
#174
code423n4
opened
1 year ago
1
QA Report
#173
code423n4
closed
1 year ago
1
Gas Optimizations
#172
code423n4
closed
1 year ago
1
QA Report
#171
code423n4
closed
1 year ago
1
Gas Optimizations
#170
code423n4
closed
1 year ago
0
Daily bridge amount limit should be enforced to prevent bridge takeover due to a single bug. For example, Nomad hack.
#169
code423n4
closed
1 year ago
2
GRT may be locked in the destination contract forever if the user or external developers bridge it to a contract that requires onTokenTransfer without sending data.
#168
code423n4
opened
1 year ago
1
onTokenTransfer should returns a magicValue that is validated after.
#167
code423n4
closed
1 year ago
1
Consider adding refundAddress to prevent fund losing if the callhook never succeeds.
#166
code423n4
closed
1 year ago
6
Previous
Next