issues
search
code-423n4
/
2023-05-xeth-findings
0
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Upgraded Q -> 2 from #11 [1685422294441]
#41
c4-judge
closed
1 year ago
2
Upgraded Q -> 2 from #19 [1685157301242]
#39
c4-judge
closed
1 year ago
2
Deflation bricking
#38
code423n4
closed
1 year ago
4
Gas Optimizations
#37
code423n4
opened
1 year ago
1
QA Report
#36
code423n4
opened
1 year ago
3
Rebalance amounts should be checked so that updated balances falls within thresholds
#35
code423n4
opened
1 year ago
3
Gas Optimizations
#34
code423n4
opened
1 year ago
3
Inconsistent check for LP balance in AMO
#33
code423n4
opened
1 year ago
3
Adding locked funds may undercut current stakers rewards due to `drip` being called before totalFunds is increased
#32
code423n4
opened
1 year ago
6
CVXStaker cannot recover ETH
#31
code423n4
opened
1 year ago
4
Zero token transfer can cause a potential DoS in CVXStaker
#30
code423n4
opened
1 year ago
5
Unspent allowance may break functionality in AMO
#29
code423n4
opened
1 year ago
3
Rebalancing may not be able to sufficiently adjust the percentage
#28
code423n4
closed
1 year ago
10
Potential loss of precision in stake and unstake actions of wxETH
#27
code423n4
opened
1 year ago
7
Rebalancing may overshoot
#26
code423n4
closed
1 year ago
3
Spot balances of Curve pool can be manipulated to force or block rebalances
#25
code423n4
opened
1 year ago
11
Inflation attack by drip
#24
code423n4
closed
1 year ago
3
Virgin stake can claim all drops
#23
code423n4
opened
1 year ago
8
wxETH is vulnerable to the inflation attack
#22
code423n4
closed
1 year ago
5
Inflation attack by token transfer
#21
code423n4
opened
1 year ago
8
QA Report
#20
code423n4
opened
1 year ago
4
QA Report
#19
code423n4
opened
1 year ago
2
Gas Optimizations
#18
code423n4
opened
1 year ago
1
AMO2 doesn't add the lp balance of the CVXStaker to the withdrawable token amount
#17
code423n4
closed
1 year ago
2
Some functions of the CVXStaker lack 0 address check
#16
code423n4
closed
1 year ago
4
wxETH.addLockedFunds can cause unexpected cessation of drip
#15
code423n4
closed
1 year ago
6
Incorrect slippage check in the AMO2.rebalanceUp can be attacked by MEV
#14
code423n4
opened
1 year ago
14
All the lp tokens will be stuck in the AMO2 contract if CVXStaker.withdrawAllAndUnwrap is called with sendToOperator flag
#13
code423n4
closed
1 year ago
3
Gas Optimizations
#12
code423n4
opened
1 year ago
1
QA Report
#11
code423n4
opened
1 year ago
2
xETH.sol You can still burn without MINTER_ROLE
#10
code423n4
opened
1 year ago
6
stakedBalance() The wrong number of balance may be returned
#9
code423n4
closed
1 year ago
2
CVXStaker.sol Unable to process newly add rewardTokens
#8
code423n4
opened
1 year ago
7
QA Report
#7
code423n4
opened
1 year ago
1
withdrawAllAndUnwrap() the clpToken transfer to AMO.sol may be locked in the contract
#6
code423n4
opened
1 year ago
3
isCvxShutdown() booster shutdown but pool don't shutdown
#5
code423n4
opened
1 year ago
5
wxETH.sol Inflation Attack
#4
code423n4
closed
1 year ago
5
First 1 wei deposit can produce lose of user xETH funds in `wxETH`
#3
code423n4
opened
1 year ago
7
`AMO2::setRebalanceUpThreshold` and `AMO2::setRebalanceDownThreshold` should check that invariant `REBALANCE_DOWN_THRESHOLD < REBALANCE_UP_THRESHOLD` holds
#2
code423n4
closed
1 year ago
11
Agreements & Disclosures
#1
code423n4
opened
1 year ago
0