issues
search
code-423n4
/
2023-08-verwa-findings
8
stars
7
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Epoch could be skipped during setting of rewards, reading to DoS and bad UX
#476
code423n4
opened
1 year ago
3
LendingLedger.sol sends ETH instead of CANTO
#475
code423n4
closed
1 year ago
4
Loss of precision lead to loss of user's voting power
#474
code423n4
opened
1 year ago
4
Analysis
#473
code423n4
opened
1 year ago
1
Analysis
#472
code423n4
opened
1 year ago
1
Sencond hand Delegatee can Withdraw before owner undelegates
#471
code423n4
closed
1 year ago
6
Analysis
#470
code423n4
opened
1 year ago
1
Claim reward can be inaccessible if msg.sender is a smart contract with no fallback/receive
#469
code423n4
opened
1 year ago
5
Analysis
#468
code423n4
closed
1 year ago
2
Missing access control for whitelisted smart contract
#467
code423n4
closed
1 year ago
7
QA Report
#466
code423n4
opened
1 year ago
1
Analysis
#465
code423n4
opened
1 year ago
1
QA Report
#464
code423n4
opened
1 year ago
1
User can claim most of the rewards for a lending market by depositing cNote for just 2 blocks / epoch
#463
code423n4
closed
1 year ago
4
Analysis
#462
code423n4
opened
1 year ago
1
QA Report
#461
code423n4
opened
1 year ago
1
Analysis
#460
code423n4
closed
1 year ago
1
Voters can vote on a single pool multiple times by redelegating
#459
code423n4
closed
1 year ago
8
Fixed locking period of 5 years doesn't allow the delegator to withdraw funds for atleast another 5 years
#458
code423n4
closed
1 year ago
8
Analysis
#457
code423n4
closed
1 year ago
1
QA Report
#456
code423n4
opened
1 year ago
1
Removing a lending market from the whitelist will likely result in locked user funds
#455
code423n4
opened
1 year ago
9
User point history for first epoch remains empty
#454
code423n4
closed
1 year ago
2
Analysis
#453
code423n4
opened
1 year ago
1
Analysis
#452
code423n4
opened
1 year ago
3
Analysis
#451
code423n4
opened
1 year ago
1
GaugeController` allows for quick vote and withdraw
#450
code423n4
closed
1 year ago
9
If gov use removeGauge users who use votingPower for that gauge will lose their votingPower infinetly.
#449
code423n4
closed
1 year ago
5
QA Report
#448
code423n4
opened
1 year ago
2
QA Report
#447
code423n4
opened
1 year ago
1
Analysis
#446
code423n4
opened
1 year ago
10
QA Report
#445
code423n4
opened
1 year ago
1
GaugeController._get_sum() returns wrong value, breaking vote accounting
#444
code423n4
closed
1 year ago
4
Double voting in GaugeController
#443
code423n4
closed
1 year ago
7
Contrary to sponsor's intent, the gauge's weight will not be updated properly if governance do not change weight before any voting
#442
code423n4
closed
1 year ago
6
the `claim` function may underFlow when it calculate the `claimEnd `
#441
code423n4
closed
1 year ago
3
QA Report
#440
code423n4
opened
1 year ago
2
receive() in LendingLedger should be replaced by an appropriate function to prevent users from sending native by mistake
#439
code423n4
closed
1 year ago
2
critical functions should emit an event when they called
#438
code423n4
closed
1 year ago
2
lendingMarketTotalBalance isn't updated for first call to _checkpoint_market in markets created in first epoch
#437
code423n4
closed
1 year ago
7
Not accepted value is passing the validation in `vote_for_gauge_weights`
#436
code423n4
opened
1 year ago
6
No need to stack lend pool to take lendlaunger rewards
#435
code423n4
closed
1 year ago
5
QA Report
#434
code423n4
opened
1 year ago
1
Delegate system can be used to increase voting power without resetting the lockEnd
#433
code423n4
closed
1 year ago
12
QA Report
#432
code423n4
opened
1 year ago
1
change_gauge_weight can update an invalid Gauge
#431
code423n4
opened
1 year ago
7
Failed transfer with low level call could be overlooked
#430
code423n4
closed
1 year ago
2
User funds can be lost
#429
code423n4
closed
1 year ago
2
QA Report
#428
code423n4
opened
1 year ago
1
TEST FINDING
#427
code423n4
closed
1 year ago
1
Next