issues
search
code-423n4
/
2023-09-goodentry-mitigation-findings
0
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Attacker can extract value from pool by sandwiching herself at `swapAll` during `close`
#60
c4-submissions
opened
11 months ago
7
swapTokensForExactTokens allows anyone to steal funds within the V3Proxy contract
#59
c4-submissions
opened
11 months ago
3
Use of tx.origin breaks interoperability with AA wallets.
#58
c4-submissions
closed
11 months ago
2
`removeFromAllTicks` should be done before `getTVL`
#57
c4-submissions
opened
11 months ago
5
The roerouter hard-coded address error causes all fee funds to be sent to the treasury instead of the vault
#56
c4-submissions
closed
11 months ago
3
Incorrect use of getTokenAmounts causes getReserves / getTVL to be overestimated
#55
c4-submissions
closed
11 months ago
3
The number of ticks is incorrectly fixed and is not equal to liquidityPerTick, resulting in low fund utilization.
#54
c4-submissions
closed
11 months ago
2
`getActiveTickIndex` returns wrong index
#53
c4-submissions
closed
11 months ago
3
M-08 MitigationConfirmed
#52
c4-submissions
closed
11 months ago
4
`depositExactly` could be exploited
#51
c4-submissions
opened
11 months ago
7
GeVault LP calculations do not use scaling and are vulnerable to deposit attacks
#50
c4-submissions
closed
11 months ago
4
Compound charges are sent to GeVault, making them potentially vulnerable to theft
#49
c4-submissions
closed
11 months ago
2
M-02 MitigationConfirmed
#48
c4-submissions
opened
11 months ago
1
M-06 MitigationConfirmed
#47
c4-submissions
opened
11 months ago
1
M-01 MitigationConfirmed
#46
c4-submissions
opened
11 months ago
1
H-06 MitigationConfirmed
#45
c4-submissions
opened
11 months ago
1
H-05 MitigationConfirmed
#44
c4-submissions
opened
11 months ago
1
getActiveTickIndex implementation error
#43
c4-submissions
opened
11 months ago
4
H-03 MitigationConfirmed
#42
c4-submissions
opened
11 months ago
1
M-08 Unmitigated
#41
c4-submissions
opened
11 months ago
8
M-07 MitigationConfirmed
#40
c4-submissions
opened
11 months ago
2
M-06 MitigationConfirmed
#39
c4-submissions
opened
11 months ago
2
M-05 MitigationConfirmed
#38
c4-submissions
opened
11 months ago
3
M-03 MitigationConfirmed
#37
c4-submissions
opened
11 months ago
4
M-02 MitigationConfirmed
#36
c4-submissions
opened
11 months ago
2
M-01 MitigationConfirmed
#35
c4-submissions
opened
11 months ago
2
H-02 MitigationConfirmed
#34
c4-submissions
opened
11 months ago
2
H-06 MitigationConfirmed
#33
c4-submissions
opened
11 months ago
2
H-05 MitigationConfirmed
#32
c4-submissions
opened
11 months ago
2
H-04 MitigationConfirmed
#31
c4-submissions
opened
11 months ago
2
H-03 MitigationConfirmed
#30
c4-submissions
opened
11 months ago
2
H-01 MitigationConfirmed
#29
c4-submissions
opened
11 months ago
2
H-02 MitigationConfirmed
#28
c4-submissions
opened
11 months ago
1
M-07 MitigationConfirmed
#27
c4-submissions
opened
11 months ago
1
H-04 MitigationConfirmed
#26
c4-submissions
opened
11 months ago
1
H-01 MitigationConfirmed
#25
c4-submissions
opened
11 months ago
1
H-01 Unmitigated
#24
c4-submissions
closed
11 months ago
1
H-01 MitigationConfirmed
#23
c4-submissions
closed
11 months ago
1
M-05 MitigationConfirmed
#22
c4-submissions
opened
11 months ago
1
GeVault's depositAndStash always reverts and ignores deposits to the active (and most important) ticker
#21
code423n4
opened
11 months ago
8
Wrong tick selected by GeVault.getActiveTickIndex()
#20
code423n4
closed
11 months ago
2
Missing withdrawal in GeVault's modifyTick can cause GeVault to lock assets in discarded TokenisableRange instances
#19
code423n4
opened
11 months ago
1
UniswapV3 trading fees are always locked in treasury instead of going back to the protocol users through GeVault
#18
code423n4
opened
11 months ago
3
Transaction origin check in ROE Markets make Options positions opened by contract users impossible to reduce or close
#17
code423n4
opened
11 months ago
3
New from fees rework: fees can still be stolen with a flash-loan on GeVault
#16
code423n4
closed
11 months ago
2
H-03 MitigationConfirmed
#15
code423n4
opened
11 months ago
1
M-03 MitigationConfirmed
#14
code423n4
opened
11 months ago
4
M-01 MitigationConfirmed
#13
code423n4
opened
11 months ago
1
Courtesy QA findings
#12
code423n4
opened
11 months ago
2
H-01 MitigationConfirmed
#11
code423n4
opened
11 months ago
1
Next