issues
search
code-423n4
/
2023-03-zksync-findings
6
stars
1
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Division before multiply results in precision loss
#166
code423n4
closed
1 year ago
4
QA Report
#165
code423n4
closed
1 year ago
2
Transactions can be submitted with worng signatures
#164
code423n4
closed
1 year ago
4
Incorrect usage of EIP-150
#163
code423n4
closed
1 year ago
8
QA Report
#162
code423n4
closed
1 year ago
3
QA Report
#161
code423n4
closed
1 year ago
2
Unsafe system contract verification
#160
code423n4
closed
1 year ago
4
QA Report
#159
code423n4
closed
1 year ago
2
bootloader doesn't add tighter gas limit to the IAccount.validateTransaction call
#158
code423n4
closed
1 year ago
4
The value sent to EventWriter will stuck in the contract
#157
code423n4
closed
1 year ago
6
NonceHolder.setValueUnderNonce does not increase the minNonce when using sequential account nonce ordering
#156
code423n4
closed
1 year ago
5
NonceHolder.setValueUnderNonce does not check if the nonce has been used before
#155
code423n4
closed
1 year ago
3
DefaultAccount.executeTransactionFromOutside does not validate if the signature is valid for the sender
#154
code423n4
closed
1 year ago
4
The call to MsgValueSimulator with non zero msg.value will call to sender itself which will bypass the onlySelf check
#153
code423n4
opened
1 year ago
26
DefaultAccount will add system call flag to any call with msg.value
#152
code423n4
closed
1 year ago
2
QA Report
#151
code423n4
opened
1 year ago
3
Gas Optimizations
#150
code423n4
closed
1 year ago
1
`DefaultAccount.executeTransactionFromOutside` always reverts
#149
code423n4
closed
1 year ago
7
Users pay excessive gas cost for sending bytecode hashes to L1
#148
code423n4
closed
1 year ago
8
Default accounts cannot pay transaction fees due to `DefaultAccount` not calling `MsgValueSimulator`
#147
code423n4
closed
1 year ago
4
User transactions can call system contracts directly
#146
code423n4
opened
1 year ago
6
Balance check can revert a transaction when account has enough balance
#145
code423n4
closed
1 year ago
14
[bootloader] Paymaster context can override a transaction hash in memory
#144
code423n4
closed
1 year ago
4
[bootloader] A bytecode hash without the bytecode (preimage) can be marked as known, breaking the prover
#143
code423n4
closed
1 year ago
5
QA Report
#142
code423n4
closed
1 year ago
3
system upgrade user can change any contract logic
#141
code423n4
closed
1 year ago
6
QA Report
#140
code423n4
opened
1 year ago
3
QA Report
#139
code423n4
closed
1 year ago
2
Wrong block number calculation
#138
code423n4
closed
1 year ago
2
Centralization Risk - team can force-deploy to ANY address
#137
code423n4
opened
1 year ago
5
QA Report
#136
code423n4
closed
1 year ago
2
QA Report
#135
code423n4
closed
1 year ago
2
QA Report
#134
code423n4
closed
1 year ago
2
Governor can alter any contract's bytecode (Outside of system contracts)
#133
code423n4
closed
1 year ago
4
QA Report
#132
code423n4
closed
1 year ago
2
QA Report
#131
code423n4
opened
1 year ago
3
QA Report
#130
code423n4
opened
1 year ago
3
Gas Optimizations
#129
code423n4
closed
1 year ago
1
QA Report
#128
code423n4
closed
1 year ago
2
QA Report
#127
code423n4
closed
1 year ago
3
NonceHolder.setValueUnderNonce lack of validation
#126
code423n4
closed
1 year ago
4
Unchecked low-level calls
#125
code423n4
closed
1 year ago
6
L2EthToken.withdraw can be underflow with little cost
#124
code423n4
closed
1 year ago
2
QA Report
#123
code423n4
closed
1 year ago
3
Address.sendValue() might fail silently
#122
code423n4
closed
1 year ago
2
DefaultAccount._validateTransaction cast uint256 to uint32
#121
code423n4
closed
1 year ago
5
QA Report
#120
code423n4
opened
1 year ago
3
QA Report
#119
code423n4
closed
1 year ago
2
User may lose ETH
#118
code423n4
closed
1 year ago
5
No way to withdraw ETH sent to DefaultAccount.sol via receive
#117
code423n4
closed
1 year ago
5
Previous
Next