code-423n4 2023-10-badger-findings issues

code-423n4 / 2023-10-badger-findings

1 stars 1 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

QA Report

#328 c4-submissions closed 8 months ago
2
Use of transferFrom() rather than safeTransferFrom() for NFTs in will lead to the loss of NFTs

#327 c4-submissions closed 8 months ago
5
QA Report

#326 c4-submissions opened 8 months ago
4
Free loans issue

#325 c4-submissions opened 8 months ago
10
QA Report

#324 c4-submissions opened 8 months ago
3
Stormy - Lost of user funds, as LeverageMacroReferences can't do an arbitrary system call to the function claimsSurplusCollShare in order to claim the extra surplus collateral gained from their liquidated or fully redeemed Cdps.

#323 c4-submissions opened 8 months ago
8
Gas Optimizations

#322 c4-submissions opened 8 months ago
4
Gas Optimizations

#321 c4-submissions opened 8 months ago
4
Stormy - The new pagination feature for finding a certain Cdp by given index is used incorrectly in LeverageMacroBase, as a result the macro won't be able to correctly compare the stats of its newly opened Cdps when performing the post creation call check.

#320 c4-submissions closed 8 months ago
7
Invariant Breakage: stakingRewardSplit can be > MAX_REWARD_SPLIT leading to loss of funds through excessive fee accrual

#319 c4-submissions closed 8 months ago
5
QA Report

#318 c4-submissions closed 8 months ago
2
Gas Optimizations

#317 c4-submissions opened 8 months ago
3
Gas Optimizations

#316 c4-submissions opened 8 months ago
4
There is missing overflow check in the flashloan function

#315 c4-submissions closed 8 months ago
5
Gas Optimizations

#314 c4-submissions opened 8 months ago
4
Gas Optimizations

#313 c4-submissions opened 8 months ago
4
Gas Optimizations

#312 c4-submissions opened 8 months ago
4
Gas Optimizations

#311 c4-submissions opened 8 months ago
7
`fetchPrice` can return different prices in the same transaction

#310 c4-submissions opened 8 months ago
10
Gas Optimizations

#309 c4-submissions opened 8 months ago
4
The redemption fee can be manipulated inflating the total debt in the system

#308 c4-submissions opened 8 months ago
15
Chainlink use stETH oracle and stETH rebase can have delay and impact protocol accounting

#307 c4-submissions opened 8 months ago
7
In the event of slashing, some users can not save their position/ add collateral

#306 c4-submissions closed 8 months ago
5
Gas Optimizations

#305 c4-submissions opened 8 months ago
4
QA Report

#304 c4-submissions opened 8 months ago
5
QA Report

#303 c4-submissions closed 8 months ago
4
Gas Optimizations

#302 c4-submissions closed 8 months ago
3
Stormy - Liquidating underwater Cdp in the function batchLiquidateCdps doesn’t redistribute the bad debt accordingly among all other Cdps in the batch list.

#301 c4-submissions closed 8 months ago
3
Gas Optimizations

#300 c4-submissions opened 8 months ago
6
Gas Optimizations

#299 c4-submissions opened 8 months ago
4
QA Report

#298 c4-submissions closed 8 months ago
2
Gas Optimizations

#297 c4-submissions closed 7 months ago
4
Not able to make position healthy when stETH collateral is paused

#296 c4-submissions closed 8 months ago
5
Gas Optimizations

#295 c4-submissions opened 8 months ago
4
QA Report

#294 c4-submissions closed 8 months ago
2
QA Report

#293 c4-submissions opened 8 months ago
3
Possibility of different fetchPrice, when multiple requests(transactions) in the same block

#292 c4-submissions closed 8 months ago
5
Multiple cases being missed in the ```fetchPrice()``` function of PriceFedd.sol

#291 c4-submissions closed 8 months ago
4
`create` methods are suspicious of the reorg attack in `LeverageMacroFactory.sol`

#290 c4-submissions closed 8 months ago
3
Untrusted Chainlink price is used without a basis for comparison

#289 c4-submissions closed 8 months ago
4
QA Report

#288 c4-submissions closed 7 months ago
5
QA Report

#287 c4-submissions closed 8 months ago
1
QA Report

#286 c4-submissions closed 8 months ago
2
Gas Optimizations

#285 c4-submissions opened 8 months ago
4
Analysis

#284 c4-submissions closed 8 months ago
3
QA Report

#283 c4-submissions closed 8 months ago
3
QA Report

#282 c4-submissions closed 8 months ago
4
The `computeCR` function leads to users depositing more collateral than necessary, resulting in a loss of staking rewards.

#281 c4-submissions closed 8 months ago
8
Gas Optimizations

#280 c4-submissions opened 8 months ago
5
QA Report

#279 c4-submissions opened 8 months ago
1