code-423n4 2023-08-dopex-findings issues

code-423n4 / 2023-08-dopex-findings

3 stars 3 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Upgraded Q -> 2 from #1784 [1698218728214]

#2231 c4-judge closed 9 months ago
2
Upgraded Q -> 2 from #2037 [1698131784473]

#2230 c4-judge closed 9 months ago
2
Upgraded Q -> 2 from #2142 [1698131545015]

#2229 c4-judge closed 9 months ago
2
Upgraded Q -> 3 from #839 [1698131435131]

#2228 c4-judge closed 9 months ago
2
Upgraded Q -> 2 from #425 [1698130939448]

#2227 c4-judge closed 9 months ago
2
Upgraded Q -> 2 from #1553 [1698130820647]

#2226 c4-judge closed 9 months ago
4
QA Report

#2224 code423n4 closed 9 months ago
3
Analysis

#2223 code423n4 closed 9 months ago
3
Gas Optimizations

#2222 code423n4 closed 9 months ago
3
Users can redeem rDpx they haven't deposited

#2221 code423n4 closed 9 months ago
6
QA Report

#2220 code423n4 closed 9 months ago
2
Gas Optimizations

#2219 code423n4 closed 9 months ago
3
Gas Optimizations

#2218 code423n4 closed 9 months ago
2
Incorrect expiration timestamp when swapping tokens

#2217 code423n4 opened 10 months ago
6
QA Report

#2216 code423n4 closed 9 months ago
3
RdpxV2Core: setRdpxBurnPercentage() and setRdpxFeePercentage() affected by Precision & Input validation issue which will result in rdpx burn & fee % to be 1e8 smaller than expected/intended.

#2215 code423n4 closed 10 months ago
3
Wrong element is popped from reserveTokens list when removing an asset

#2214 code423n4 closed 10 months ago
4
Analysis

#2213 code423n4 closed 9 months ago
3
Analysis

#2212 code423n4 closed 9 months ago
3
wrong calculation of `bondDiscount` and `weth/rdpx` required lead to incorrect amount needed to mint dpxETH

#2211 code423n4 opened 10 months ago
8
Bonding WETH discounts can drain WETH reserves of RdpxV2Core contract to zero

#2210 code423n4 opened 10 months ago
5
Users buying big amounts of bonds can get a bigger discount by donating rDPX to the reserve

#2209 code423n4 closed 10 months ago
4
totalWethDelegated does not decrease in withdraw can cause DOS

#2208 code423n4 closed 10 months ago
5
Only admin can call peg functions

#2207 code423n4 closed 9 months ago
4
Incorrect price precision in RdpxV2Core

#2206 code423n4 closed 10 months ago
5
rdpxRequired value sets to 0 or faces Arithmetic overflow/underflow error.

#2205 code423n4 closed 10 months ago
4
Analysis

#2204 code423n4 closed 9 months ago
3
Calculating slippage from price oracle is not accurate

#2203 code423n4 closed 9 months ago
4
EIP-2938 Breaks Whitelist Logic

#2202 code423n4 closed 9 months ago
5
[M-02] Inconsistent Role Usage for Pausing Functionality in `DpxEthToken`

#2201 code423n4 closed 9 months ago
4
wrong sets of `weth/dpxEth` balance leads to incorrect calculation

#2200 code423n4 closed 9 months ago
4
No check when updating `rdpxBurnPercentage` or `rdpxFeePercentage`

#2199 code423n4 closed 10 months ago
4
[M-01] Role Confusion in Mint Function in `RdpxV2Bond`

#2198 code423n4 closed 8 months ago
3
QA Report

#2197 code423n4 closed 9 months ago
3
the `perpetualVaultLP.sol` is vulnable by flashloan attack

#2196 code423n4 closed 10 months ago
3
QA Report

#2195 code423n4 closed 9 months ago
2
Calling setAddresses every subsequent time doesn't revoke the max token approval for the old addresses

#2194 code423n4 closed 10 months ago
2
The utilization of strict equality within the subtractLoss function is susceptible to straightforward manipulation by a potential attacker.

#2193 code423n4 closed 10 months ago
5
Flashloan/Sandwich Attacks on `UpdateFunding()`

#2192 code423n4 closed 9 months ago
5
Users are able to front-run settlements to avoid loss

#2191 code423n4 closed 9 months ago
8
Potential insolvency risk in dpxETH stablecoin system due to absence of liquidation mechanism

#2190 code423n4 closed 9 months ago
4
QA Report

#2189 code423n4 closed 9 months ago
3
Lose due to rounding. Use more precise library for mathematical operations

#2188 code423n4 closed 9 months ago
3
Regular bonding incorrectly purchases a reduced amount of Put options due to discount

#2187 code423n4 closed 9 months ago
11
Calling withdraw on a delegated amount of WETH doesn't subtract from totalWethDelegated

#2186 code423n4 closed 9 months ago
11
Swap Slippage Check Missing Location: reLP function

#2185 code423n4 closed 9 months ago
3
`rdpxBurnPercentage` and `rdpxFeePercentage` combined is not always 100 percent

#2184 code423n4 closed 10 months ago
5
Zero Amount Check Missing in reLP function

#2183 code423n4 closed 9 months ago
3
No bond discount above 50% can be given due to an underflowing calculation

#2182 code423n4 closed 10 months ago
4
Missed approving to UniswapV2Router

#2181 code423n4 closed 9 months ago
4