code-423n4 2023-11-canto-findings issues

code-423n4 / 2023-11-canto-findings

7 stars 6 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Cannot withdraw 1:1

#516 c4-submissions closed 9 months ago
2
user can buy when there's no bonding curve set

#515 c4-submissions closed 9 months ago
3
Analysis

#514 c4-submissions opened 9 months ago
5
Malicious shares can't be paused or stopped after creation, so users will continue use them

#513 c4-submissions closed 9 months ago
2
Gas Optimizations

#512 c4-submissions opened 9 months ago
1
Pricing inconsistencies introduced via rounding/truncation errors

#511 c4-submissions closed 9 months ago
3
Require statement will allow WhitlistedShareCreators to create a share when share Creation is Restricted

#510 c4-submissions closed 9 months ago
4
Potential Race Condition in Rewards Calculation

#509 c4-submissions closed 9 months ago
3
Holder cannot claim fee

#508 c4-submissions closed 9 months ago
3
Analysis

#507 c4-submissions closed 9 months ago
1
ERC1155 metadata uri spec is not conformed to in contract Market.sol

#506 c4-submissions closed 9 months ago
3
Possible sandwhich attack whenever a user with a surplus of allowance calls market.buy().

#505 c4-submissions closed 9 months ago
2
Creator can earn `holder` fee

#504 c4-submissions closed 9 months ago
2
Incorrect fee splitting logic

#503 c4-submissions closed 9 months ago
3
Analysis

#502 c4-submissions opened 9 months ago
1
QA Report

#501 c4-submissions closed 9 months ago
1
Lost fees

#500 c4-submissions closed 9 months ago
4
Analysis

#499 c4-submissions closed 9 months ago
1
Buying at a discount

#498 c4-submissions opened 9 months ago
7
Not enough check for getPriceAndFee

#497 c4-submissions closed 9 months ago
2
MEV-attack

#496 c4-submissions closed 9 months ago
3
There is potential underflow and overflow issues in arithmetic operations in the _getRewardsSinceLastClaim function

#495 c4-submissions closed 9 months ago
3
Sandwich attack on buy()

#494 c4-submissions closed 9 months ago
2
there will be front running in creating share

#493 c4-submissions opened 9 months ago
3
Analysis

#492 c4-submissions closed 9 months ago
1
Analysis

#491 c4-submissions closed 9 months ago
2
Unhandled contract ownership states can lead to unexpected behaviour

#490 c4-submissions closed 9 months ago
3
Potential Out of Gas Error in Buy, Sell, MintNFT, and BurnNFT Operations Due to `getPriceAndFee()` Function in LinearBondingCurve Contract

#489 c4-submissions closed 9 months ago
13
The getPriceAndFee() function performs calculations without implementing reentrancy protection.

#488 c4-submissions closed 9 months ago
3
The user has the ability to bypass a fee claim protection for their own benefit while purchasing tokens

#487 c4-submissions closed 9 months ago
3
Analysis

#486 c4-submissions closed 9 months ago
1
Reentrancy in Token Transfers

#485 c4-submissions closed 9 months ago
2
QA Report

#484 c4-submissions closed 9 months ago
1
there is rounding error when price is below 10

#483 c4-submissions closed 9 months ago
3
Unchecked Bonding Curve Lookups in Market validation of _id in buy() and sell() absent.

#482 c4-submissions closed 9 months ago
3
[H1] GetPriceAndFee is a Gas Bomb

#481 c4-submissions closed 9 months ago
3
Lack of access control for mint/burn functions

#480 c4-submissions closed 9 months ago
3
Unchecked cToken mint in mint() risks imbalance, breaking 1:1 peg reserve backing.

#479 c4-submissions closed 9 months ago
3
Reentrancy leads to minting/burning/buying without paying the correct amount of fees

#478 c4-submissions closed 9 months ago
3
Unchecked `redeemUnderlying` failure allows burning asD without redeeming NOTE, breaking peg.

#477 c4-submissions closed 9 months ago
3
Analysis

#476 c4-submissions opened 9 months ago
1
QA Report

#475 c4-submissions closed 9 months ago
1
DOS Vulnerability on calculating price

#474 c4-submissions closed 9 months ago
3
A malfunctioning bonding curve may break functionality for some shares

#473 c4-submissions closed 9 months ago
7
platform will get 40 percent of fee if fee are below 100

#472 c4-submissions closed 9 months ago
3
`shareData[_id].shareHolderRewardsPerTokenScaled` is updated with wrong value in `_splitFees()`

#471 c4-submissions closed 9 months ago
3
QA Report

#470 c4-submissions opened 9 months ago
1
Existing shares can continue operating after blacklisting their bonding curve address

#469 c4-submissions closed 9 months ago
3
QA Report

#468 c4-submissions closed 9 months ago
2
Price can be easily inflated/deflated by large depositors in the `Market` contract

#467 c4-submissions closed 9 months ago
6