issues
search
code-423n4
/
2023-10-canto-findings
0
stars
1
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Users claim more rewards than they should in case they provided liquidity to the pool for just a segment of the week
#207
c4-submissions
closed
1 year ago
4
QA Report
#206
c4-submissions
opened
1 year ago
2
Gas Optimizations
#205
c4-submissions
closed
1 year ago
2
Gas Optimizations
#204
c4-submissions
closed
1 year ago
2
Incorrect calculation of concentrated rewards
#203
c4-submissions
closed
1 year ago
3
Loss of Funds Due to Inadequate Parameter Validation in userCmd Function
#202
c4-submissions
closed
1 year ago
5
Liquidity provider could be blocked to provide liquidity or withdraw their assets due to Denial Of Service with gas limit
#201
c4-submissions
closed
1 year ago
3
Smaller than 21 ticks would accrue lower rewards on next claim
#200
c4-submissions
closed
1 year ago
3
Smart Contract Balance Theft Due To Arbitrary Code Execution
#199
c4-submissions
closed
1 year ago
4
Part of the Rewards can be locked forever due to nobody can claim them
#198
c4-submissions
closed
1 year ago
5
Incentive Mechanism does not work as expected.
#197
c4-submissions
closed
1 year ago
4
Protocol control related commands have no access control check
#196
c4-submissions
closed
1 year ago
3
Users can apply for rewards for the same week multiple times
#195
c4-submissions
closed
1 year ago
3
If rewards are not set. `ambLiquidityRewardsClaimed_` and `concLiquidityRewardsClaimed_` shouldn't be set to true.
#194
c4-submissions
closed
1 year ago
5
Potential Reward Draining Vulnerability in claimAmbientRewards Function
#193
c4-submissions
closed
1 year ago
3
Missing access control in `setAmbRewards` and `setConcRewards` functions of `LiquidityMiningPath.sol`. Malicious user can call them and increase the reward by passing `poolIdx` for his pool.
#192
c4-submissions
closed
1 year ago
3
Inadequate Access Control on Critical Functions in LiquidityMiningPath Contract
#191
c4-submissions
closed
1 year ago
3
Impact of ETH Transfer Handling Vulnerability in Contract
#190
c4-submissions
closed
1 year ago
7
Users can transfer / sell their LPs and still get rewards
#189
c4-submissions
closed
1 year ago
4
Analysis
#188
c4-submissions
closed
1 year ago
2
Calculation Issue in claimConcentratedRewards Function Can Prevent Reward Distribution for Narrow Tick Ranges
#187
c4-submissions
closed
1 year ago
3
accrued liquidity can be lose and never get recovered for a given tick period.
#186
c4-submissions
opened
1 year ago
10
Rewards may be set for one more week than expected
#185
c4-submissions
opened
1 year ago
4
Analysis
#184
c4-submissions
opened
1 year ago
2
`LiquidityMining.accrueAmbientGlobalTimeWeightedLiquidity` could compute the wrong result if it is not called before the ambient liquidity is modified
#183
c4-submissions
closed
1 year ago
3
Rewards can be stolen from LiquidityMiningPath.sol
#182
c4-submissions
closed
1 year ago
3
Missing access control for setting rewards
#181
c4-submissions
closed
1 year ago
3
Gas cost may exceed reward value
#180
c4-submissions
opened
1 year ago
6
Potential Underflow Leads to Transaction Revert in crossTicks Function in LiquidityMining.sol
#179
c4-submissions
closed
1 year ago
3
Anyone can set the `weeklyReward`s via `LiquidityMiningPath.sol` as `setConcRewards()/setAmbRewards()` functions have their access control checks commented out.
#178
c4-submissions
closed
1 year ago
3
Positions that are not eligible for rewards will affect the reward income of eligible positions.
#177
c4-submissions
opened
1 year ago
4
Gas Exhaustion Vulnerability in Reward Claiming due to Unbounded Loop
#176
c4-submissions
closed
1 year ago
5
Users will lose rewards if rewards are set after they claim them
#175
c4-submissions
closed
1 year ago
3
Unable to claim concentrated reward for a wide range position
#174
c4-submissions
opened
1 year ago
5
Liquidity is double counted for each tick above 21 ticks
#173
c4-submissions
closed
1 year ago
4
Gas Optimizations
#172
c4-submissions
closed
1 year ago
2
Gas Optimizations
#171
c4-submissions
closed
1 year ago
2
Gas Optimizations
#170
c4-submissions
closed
1 year ago
2
User can claim all week rewards if he is the only one providing liquidity even if he only provides it for a few seconds
#169
c4-submissions
closed
1 year ago
3
Gas Optimizations
#168
c4-submissions
opened
1 year ago
3
Reliance on `block.timestamp` for time-related operations
#167
c4-submissions
closed
1 year ago
5
Analysis
#166
c4-submissions
closed
1 year ago
2
Part of ambient rewards are not distributed to the users.
#165
c4-submissions
closed
1 year ago
4
Reward setting can be overwritten to cause inconsistency
#164
c4-submissions
closed
1 year ago
5
Contract may not have enough balance to pay reward
#163
c4-submissions
closed
1 year ago
8
User could receive reward more than allowed
#162
c4-submissions
opened
1 year ago
3
Anyone can modify concentrated liquidity mining reward
#161
c4-submissions
closed
1 year ago
3
Anyone can modify concentrated ambient mining reward
#160
c4-submissions
closed
1 year ago
3
Gas Exhaustion Vulnerability in setAmbRewards and setAmbRewards Functions
#159
c4-submissions
closed
1 year ago
3
Unprotected Proxy Logic
#158
c4-submissions
closed
1 year ago
3
Previous
Next