issues
search
code-423n4
/
2023-01-popcorn-findings
0
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Gas Optimizations
#753
code423n4
closed
1 year ago
1
QA Report
#752
code423n4
opened
1 year ago
1
Risk of blocking user's rewards withdrawal if `escrowPercentage > 1e18`
#751
code423n4
closed
1 year ago
5
First deposit can break share calculation
#750
code423n4
closed
1 year ago
5
First depositor for the Vault can be front-run and have part of their deposit stolen
#749
code423n4
closed
1 year ago
3
Centralization risk and no functionality to feeze vaults or transfer ownership to share holders
#748
code423n4
closed
1 year ago
2
QA Report
#747
code423n4
opened
1 year ago
1
Lack of access control in Pool2SingleAssetCompounder.sol and lack of allowance cleaning when router is updated.
#746
code423n4
closed
1 year ago
2
Gas Optimizations
#745
code423n4
opened
1 year ago
1
QA Report
#744
code423n4
opened
1 year ago
1
Vault should claim reward / harvest before calling changeAdapter to avoid the loss of reward
#743
code423n4
closed
1 year ago
3
AdapterBase FEE_RECIPIENT is not implemented or updateable
#742
code423n4
closed
1 year ago
2
Gas Optimizations
#741
code423n4
closed
1 year ago
1
YearnAdapter previewRedeem / previewWithdraw does not consider the fee on yearn vault side
#740
code423n4
closed
1 year ago
3
ERC4626 vault shares can be maliciously inflated
#739
code423n4
closed
1 year ago
5
QA Report
#738
code423n4
opened
1 year ago
1
Assets that have a fee-on-transfer are not supported
#737
code423n4
closed
1 year ago
2
QA Report
#736
code423n4
opened
1 year ago
1
FIRST ERC4626 DEPOSIT CAN BE EXPLOITED ON SHARE CALCULATION
#735
code423n4
closed
1 year ago
5
legacy proposedAdapter and proposedFees state and proposedTimeStamp should be reset after timelock change applies
#734
code423n4
closed
1 year ago
5
Centralisation Risk As Owner Can Pause Adapter Of Any User's Vault
#733
code423n4
closed
1 year ago
2
Lack of timelock implementation in fee setting in AdapterBase.sol
#732
code423n4
closed
1 year ago
3
quitPeriod can not be changed since setQuitPeriod() is never called from VaultController
#731
code423n4
closed
1 year ago
2
CloneFactory can deploy non-endorsed templates
#730
code423n4
closed
1 year ago
2
QA Report
#729
code423n4
opened
1 year ago
1
Total assets of yearn vault are not correct
#728
code423n4
opened
1 year ago
3
Re-entrancy in MultiRewardStaking.claimRewards
#727
code423n4
closed
1 year ago
4
`lastHarvest` is not updated in `AdapterBase.harvest`
#726
code423n4
closed
1 year ago
3
`YearnAdapter.pause` can revert in an emergency
#725
code423n4
closed
1 year ago
3
`syncFeeCheckpoint` modifier is missing in `Vault.redeem`
#724
code423n4
closed
1 year ago
3
QA Report
#723
code423n4
opened
1 year ago
1
Token with fees will break the deposit() logic
#722
code423n4
closed
1 year ago
3
Contracts do not check the return value for `approve()`.
#721
code423n4
closed
1 year ago
2
QA Report
#720
code423n4
opened
1 year ago
1
Adapters do not implement slippage protection for deposit/mint/withdraw/redeem functions
#719
code423n4
opened
1 year ago
3
Gas Optimizations
#718
code423n4
closed
1 year ago
1
Missing storage gap in OwnedUpgradeable
#717
code423n4
closed
1 year ago
2
Quitperiod can be changed without delay
#716
code423n4
closed
1 year ago
2
Incorrect value for SECONDS_PER_YEAR
#715
code423n4
opened
1 year ago
4
Risk of reentrancy attacks in the `claimRewards` function
#714
code423n4
closed
1 year ago
4
QA Report
#713
code423n4
opened
1 year ago
1
BeefyAdapter and YearnAdapter implementation can be taken over and selfdestructed.
#712
code423n4
closed
1 year ago
5
Gas Optimizations
#711
code423n4
closed
1 year ago
1
Reentrancy vulnerability can drain reward tokens
#710
code423n4
closed
1 year ago
2
Reentrancy In Claim Rewards
#709
code423n4
closed
1 year ago
2
AdapterBase.sol is not fully up to EIP-4626's specification
#708
code423n4
closed
1 year ago
4
Gas Optimizations
#707
code423n4
closed
1 year ago
1
Wrongly input a rewardToken address will make adapter / yield strategy failed/reverted
#706
code423n4
closed
1 year ago
3
MultiRewardStaking#_lockToken will break when the reward token doesn't support 0 transfers and lock percentage == 100%
#705
code423n4
closed
1 year ago
7
Permit is susceptible to phishing attack due to identical names.
#704
code423n4
closed
1 year ago
2
Previous
Next