code-423n4 2023-10-opendollar-findings issues

code-423n4 / 2023-10-opendollar-findings

10 stars 7 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Upgraded Q -> 2 from #385 [1699689442074]

#451 c4-judge closed 10 months ago
2
Upgraded Q -> 2 from #165 [1699030252844]

#449 c4-judge closed 10 months ago
3
Upgraded Q -> 2 from #165 [1699030231989]

#448 c4-judge closed 10 months ago
2
Upgraded Q -> 2 from #193 [1699029806458]

#447 c4-judge closed 10 months ago
3
Upgraded Q -> 2 from #221 [1699029747725]

#446 c4-judge closed 10 months ago
2
Upgraded Q -> 2 from #246 [1699029732469]

#445 c4-judge closed 10 months ago
2
Upgraded Q -> 2 from #246 [1699029716295]

#444 c4-judge closed 10 months ago
2
Upgraded Q -> 2 from #300 [1699029650174]

#443 c4-judge closed 10 months ago
2
Upgraded Q -> 2 from #320 [1699029592172]

#442 c4-judge closed 10 months ago
2
Upgraded Q -> 2 from #320 [1699029580772]

#441 c4-judge closed 10 months ago
2
Upgraded Q -> 2 from #345 [1699029532851]

#440 c4-judge closed 10 months ago
2
Upgraded Q -> 2 from #385 [1699029474432]

#439 c4-judge closed 10 months ago
2
Upgraded Q -> 2 from #175 [1699029356616]

#438 c4-judge closed 10 months ago
2
Upgraded Q -> 2 from #430 [1699028562977]

#437 c4-judge closed 10 months ago
2
CamelotRelayer uses wrong interface for CamelotPair

#436 c4-submissions closed 10 months ago
5
QA Report

#435 c4-submissions closed 10 months ago
4
Analysis

#434 c4-submissions closed 10 months ago
2
Updating safeManager reference in Vault721 will brick transfer of safes

#433 c4-submissions closed 10 months ago
8
failed imports

#432 c4-submissions closed 10 months ago
4
TWAP can lead to loss of manipulation of price

#431 c4-submissions closed 10 months ago
5
QA Report

#430 c4-submissions closed 10 months ago
2
`ODSafeManager#allowSAFE()` cannot be executed either by the proxy contract or any other address.

#429 c4-submissions opened 10 months ago
8
repayAllDebt joins system tokens to the proxy not to the Safe contract

#428 c4-submissions closed 10 months ago
5
Gas Optimizations

#427 c4-submissions closed 10 months ago
2
initializeManager function can be frontrunned and eventually DOS SAFE minting !

#426 c4-submissions opened 10 months ago
4
use of correct modifier

#425 c4-submissions closed 10 months ago
4
Analysis

#424 c4-submissions closed 10 months ago
2
Lack of Reentrancy guard on auctionSurplus() function

#423 c4-submissions closed 10 months ago
3
Centralisation risk

#422 c4-submissions closed 10 months ago
6
Missing functionality required to allow others access to safe

#421 c4-submissions closed 10 months ago
5
Gas Optimizations

#420 c4-submissions closed 10 months ago
2
Wrong accounting used in `auctionDebt` in `AccountingEngine` contract

#419 c4-submissions closed 10 months ago
5
Analysis

#418 c4-submissions opened 10 months ago
2
QA Report

#417 c4-submissions opened 10 months ago
2
The GovernorSettings are set to incorrect values

#416 c4-submissions closed 10 months ago
3
Malicious User can show false proof of ownership of a SAFE by adding SAFEs to his account that doesnot actually belongs to him/her .

#415 c4-submissions closed 10 months ago
4
All functions in `ODSafeManager.sol` related to `handlerAllowed` modifier can never be called.

#414 c4-submissions closed 10 months ago
6
QA Report

#413 c4-submissions closed 10 months ago
2
Since the build function in 'Vault721' allows anyone to deploy a new ODProxy for any user without proper checks, it creates a potential exploit.

#412 c4-submissions closed 10 months ago
8
Frontrunning Exposure in `GovernorCompatibilityBravo` Integration

#411 c4-submissions closed 10 months ago
3
Potential Frontrunning & Re-org Risks while Creating SAFE in ODSafeManager

#410 c4-submissions closed 10 months ago
15
Unauthorized SAFE Addition and Irremovable SAFE Instances

#409 c4-submissions closed 10 months ago
4
Safe can not be opened for accounts which are contracts

#408 c4-submissions closed 10 months ago
7
Inadequate Support for Collateral Tokens with High Decimal Precision(> 18) in Current Implementation

#407 c4-submissions closed 10 months ago
4
Gas Optimizations

#406 c4-submissions closed 10 months ago
2
The ODGovernor is using the Governor with block.numbers which doesnt properly work on Arbitrum

#405 c4-submissions closed 10 months ago
6
Analysis

#404 c4-submissions opened 10 months ago
2
correct use of safeAllowed modifier

#403 c4-submissions closed 10 months ago
5
Selfdestruct Risk in ODProxy.sol due to Direct Deployment Call

#402 c4-submissions closed 10 months ago
4
UniswapV3 Relayer using wrong UniswapV3 factory address !

#401 c4-submissions closed 10 months ago
4