issues
search
code-423n4
/
2022-12-Stealth-Project-findings
0
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
User lose the fund if the user transfer or add liquidity to a token that does not exist
#62
code423n4
opened
1 year ago
8
Pool with any fee tier can be created
#61
code423n4
closed
1 year ago
2
Pool cannot recover from the emergency mode
#60
code423n4
closed
1 year ago
2
Gas Optimizations
#59
code423n4
opened
1 year ago
3
QA Report
#58
code423n4
opened
1 year ago
2
Swapping of tokens could be at risk without contract existence check
#57
code423n4
closed
1 year ago
3
safeTransfer function does not check for existence of ERC20 token contract
#56
code423n4
closed
1 year ago
3
When the input token is a rebasing token, the user can expand the total supply of the rebasing token in the callback to steal the output token
#55
code423n4
closed
1 year ago
4
Lack of access control for sweepToken, refundETH, unwrapWETH9 in Router.sol
#54
code423n4
closed
1 year ago
2
Certain function should not be marked as payable in Router.sol
#53
code423n4
closed
1 year ago
6
safeTransfer function does not check for existence of ERC20 token contract
#52
code423n4
closed
1 year ago
3
QA Report
#51
code423n4
opened
1 year ago
1
Gas Optimizations
#50
code423n4
opened
1 year ago
2
Re-entrancy issue when executing safeTransfer in sweepToken function
#49
code423n4
closed
1 year ago
2
Gas Optimizations
#48
code423n4
opened
1 year ago
4
Pool: The EMERGENCY state cannot be recovered
#47
code423n4
closed
1 year ago
2
protocolFeeRatio can be up to 100%
#46
code423n4
opened
1 year ago
3
Gas Optimizations
#45
code423n4
opened
1 year ago
2
QA Report
#44
code423n4
opened
1 year ago
3
Division before multiplication causing significant loss of precision
#43
code423n4
closed
1 year ago
2
`getTwa` function has dangerous strict equality
#42
code423n4
closed
1 year ago
2
safeTransfer function does not check for existence of ERC20 token contract
#41
code423n4
closed
1 year ago
5
QA Report
#40
code423n4
opened
1 year ago
3
Funds can lose - Transfer to non existent tokenId not checked
#39
code423n4
closed
1 year ago
3
Unauthorized access to remove liquidity
#38
code423n4
closed
1 year ago
2
QA Report
#37
code423n4
closed
1 year ago
2
Gas Optimizations
#36
code423n4
opened
1 year ago
3
Trader can manipulate price because bin only moved after swap
#35
code423n4
opened
1 year ago
14
Value can be extracted from LPs
#34
code423n4
closed
1 year ago
6
QA Report
#33
code423n4
opened
1 year ago
1
Approved user will be denied transfer liquidity
#32
code423n4
closed
1 year ago
3
Centralization Risk
#31
code423n4
closed
1 year ago
5
Anyone can withdraw the cryptocurrency in the Router
#30
code423n4
closed
1 year ago
6
Position NFTs can be minted by anyone for free
#29
code423n4
closed
1 year ago
5
Factor#create() does not support unsorted tokens
#28
code423n4
closed
1 year ago
4
Pool address is not deterministic, the actual Pool address deployed may be different from the address computed in advance
#27
code423n4
opened
1 year ago
4
Fee on transfer tokens are not supported
#26
code423n4
closed
1 year ago
2
Router.exactInputInternal doesn't check that swapped amount is same as amountIn provided by user
#25
code423n4
closed
1 year ago
3
User can initiate Router.exactInputSingle swap with params.recipient == 0 and do not receive output tokens
#24
code423n4
opened
1 year ago
4
Gas Optimizations
#23
code423n4
opened
1 year ago
2
Router.getOrCreatePoolAndAddLiquidity can be frontrunned which leads to price manipulation
#22
code423n4
opened
1 year ago
5
Gas Optimizations
#21
code423n4
opened
1 year ago
4
QA Report
#20
code423n4
opened
1 year ago
1
QA Report
#19
code423n4
closed
1 year ago
1
Gas Optimizations
#18
code423n4
closed
1 year ago
2
QA Report
#17
code423n4
closed
1 year ago
2
Actor can input malicious data in the swap function inputs
#16
code423n4
closed
1 year ago
2
Router.removeLiquidity doesn't allow for approved operators of token to call function
#15
code423n4
closed
1 year ago
8
Anyone can call addLiquidity function and be the router
#14
code423n4
closed
1 year ago
2
Pool.transferLiquidity doesn't check if toTokenId exists
#13
code423n4
closed
1 year ago
8
Previous
Next