code-423n4 2023-09-goodentry-mitigation-findings issues

code-423n4 / 2023-09-goodentry-mitigation-findings

0 stars 0 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Attacker can extract value from pool by sandwiching herself at `swapAll` during `close`

#60 c4-submissions opened 11 months ago
7
swapTokensForExactTokens allows anyone to steal funds within the V3Proxy contract

#59 c4-submissions opened 11 months ago
3
Use of tx.origin breaks interoperability with AA wallets.

#58 c4-submissions closed 11 months ago
2
`removeFromAllTicks` should be done before `getTVL`

#57 c4-submissions opened 11 months ago
5
The roerouter hard-coded address error causes all fee funds to be sent to the treasury instead of the vault

#56 c4-submissions closed 11 months ago
3
Incorrect use of getTokenAmounts causes getReserves / getTVL to be overestimated

#55 c4-submissions closed 11 months ago
3
The number of ticks is incorrectly fixed and is not equal to liquidityPerTick, resulting in low fund utilization.

#54 c4-submissions closed 11 months ago
2
`getActiveTickIndex` returns wrong index

#53 c4-submissions closed 11 months ago
3
M-08 MitigationConfirmed

#52 c4-submissions closed 11 months ago
4
`depositExactly` could be exploited

#51 c4-submissions opened 11 months ago
7
GeVault LP calculations do not use scaling and are vulnerable to deposit attacks

#50 c4-submissions closed 11 months ago
4
Compound charges are sent to GeVault, making them potentially vulnerable to theft

#49 c4-submissions closed 11 months ago
2
M-02 MitigationConfirmed

#48 c4-submissions opened 11 months ago
1
M-06 MitigationConfirmed

#47 c4-submissions opened 11 months ago
1
M-01 MitigationConfirmed

#46 c4-submissions opened 11 months ago
1
H-06 MitigationConfirmed

#45 c4-submissions opened 11 months ago
1
H-05 MitigationConfirmed

#44 c4-submissions opened 11 months ago
1
getActiveTickIndex implementation error

#43 c4-submissions opened 11 months ago
4
H-03 MitigationConfirmed

#42 c4-submissions opened 11 months ago
1
M-08 Unmitigated

#41 c4-submissions opened 11 months ago
8
M-07 MitigationConfirmed

#40 c4-submissions opened 11 months ago
2
M-06 MitigationConfirmed

#39 c4-submissions opened 11 months ago
2
M-05 MitigationConfirmed

#38 c4-submissions opened 11 months ago
3
M-03 MitigationConfirmed

#37 c4-submissions opened 11 months ago
4
M-02 MitigationConfirmed

#36 c4-submissions opened 11 months ago
2
M-01 MitigationConfirmed

#35 c4-submissions opened 11 months ago
2
H-02 MitigationConfirmed

#34 c4-submissions opened 11 months ago
2
H-06 MitigationConfirmed

#33 c4-submissions opened 11 months ago
2
H-05 MitigationConfirmed

#32 c4-submissions opened 11 months ago
2
H-04 MitigationConfirmed

#31 c4-submissions opened 11 months ago
2
H-03 MitigationConfirmed

#30 c4-submissions opened 11 months ago
2
H-01 MitigationConfirmed

#29 c4-submissions opened 11 months ago
2
H-02 MitigationConfirmed

#28 c4-submissions opened 11 months ago
1
M-07 MitigationConfirmed

#27 c4-submissions opened 11 months ago
1
H-04 MitigationConfirmed

#26 c4-submissions opened 11 months ago
1
H-01 MitigationConfirmed

#25 c4-submissions opened 11 months ago
1
H-01 Unmitigated

#24 c4-submissions closed 11 months ago
1
H-01 MitigationConfirmed

#23 c4-submissions closed 11 months ago
1
M-05 MitigationConfirmed

#22 c4-submissions opened 11 months ago
1
GeVault's depositAndStash always reverts and ignores deposits to the active (and most important) ticker

#21 code423n4 opened 11 months ago
8
Wrong tick selected by GeVault.getActiveTickIndex()

#20 code423n4 closed 11 months ago
2
Missing withdrawal in GeVault's modifyTick can cause GeVault to lock assets in discarded TokenisableRange instances

#19 code423n4 opened 11 months ago
1
UniswapV3 trading fees are always locked in treasury instead of going back to the protocol users through GeVault

#18 code423n4 opened 11 months ago
3
Transaction origin check in ROE Markets make Options positions opened by contract users impossible to reduce or close

#17 code423n4 opened 11 months ago
3
New from fees rework: fees can still be stolen with a flash-loan on GeVault

#16 code423n4 closed 11 months ago
2
H-03 MitigationConfirmed

#15 code423n4 opened 11 months ago
1
M-03 MitigationConfirmed

#14 code423n4 opened 11 months ago
4
M-01 MitigationConfirmed

#13 code423n4 opened 11 months ago
1
Courtesy QA findings

#12 code423n4 opened 11 months ago
2
H-01 MitigationConfirmed

#11 code423n4 opened 11 months ago
1