issues
search
code-423n4
/
2023-11-canto-findings
7
stars
6
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Cannot withdraw 1:1
#516
c4-submissions
closed
9 months ago
2
user can buy when there's no bonding curve set
#515
c4-submissions
closed
9 months ago
3
Analysis
#514
c4-submissions
opened
9 months ago
5
Malicious shares can't be paused or stopped after creation, so users will continue use them
#513
c4-submissions
closed
9 months ago
2
Gas Optimizations
#512
c4-submissions
opened
9 months ago
1
Pricing inconsistencies introduced via rounding/truncation errors
#511
c4-submissions
closed
9 months ago
3
Require statement will allow WhitlistedShareCreators to create a share when share Creation is Restricted
#510
c4-submissions
closed
9 months ago
4
Potential Race Condition in Rewards Calculation
#509
c4-submissions
closed
9 months ago
3
Holder cannot claim fee
#508
c4-submissions
closed
9 months ago
3
Analysis
#507
c4-submissions
closed
9 months ago
1
ERC1155 metadata uri spec is not conformed to in contract Market.sol
#506
c4-submissions
closed
9 months ago
3
Possible sandwhich attack whenever a user with a surplus of allowance calls market.buy().
#505
c4-submissions
closed
9 months ago
2
Creator can earn `holder` fee
#504
c4-submissions
closed
9 months ago
2
Incorrect fee splitting logic
#503
c4-submissions
closed
9 months ago
3
Analysis
#502
c4-submissions
opened
9 months ago
1
QA Report
#501
c4-submissions
closed
9 months ago
1
Lost fees
#500
c4-submissions
closed
9 months ago
4
Analysis
#499
c4-submissions
closed
9 months ago
1
Buying at a discount
#498
c4-submissions
opened
9 months ago
7
Not enough check for getPriceAndFee
#497
c4-submissions
closed
9 months ago
2
MEV-attack
#496
c4-submissions
closed
9 months ago
3
There is potential underflow and overflow issues in arithmetic operations in the _getRewardsSinceLastClaim function
#495
c4-submissions
closed
9 months ago
3
Sandwich attack on buy()
#494
c4-submissions
closed
9 months ago
2
there will be front running in creating share
#493
c4-submissions
opened
9 months ago
3
Analysis
#492
c4-submissions
closed
9 months ago
1
Analysis
#491
c4-submissions
closed
9 months ago
2
Unhandled contract ownership states can lead to unexpected behaviour
#490
c4-submissions
closed
9 months ago
3
Potential Out of Gas Error in Buy, Sell, MintNFT, and BurnNFT Operations Due to `getPriceAndFee()` Function in LinearBondingCurve Contract
#489
c4-submissions
closed
9 months ago
13
The getPriceAndFee() function performs calculations without implementing reentrancy protection.
#488
c4-submissions
closed
9 months ago
3
The user has the ability to bypass a fee claim protection for their own benefit while purchasing tokens
#487
c4-submissions
closed
9 months ago
3
Analysis
#486
c4-submissions
closed
9 months ago
1
Reentrancy in Token Transfers
#485
c4-submissions
closed
9 months ago
2
QA Report
#484
c4-submissions
closed
9 months ago
1
there is rounding error when price is below 10
#483
c4-submissions
closed
9 months ago
3
Unchecked Bonding Curve Lookups in Market validation of _id in buy() and sell() absent.
#482
c4-submissions
closed
9 months ago
3
[H1] GetPriceAndFee is a Gas Bomb
#481
c4-submissions
closed
9 months ago
3
Lack of access control for mint/burn functions
#480
c4-submissions
closed
9 months ago
3
Unchecked cToken mint in mint() risks imbalance, breaking 1:1 peg reserve backing.
#479
c4-submissions
closed
9 months ago
3
Reentrancy leads to minting/burning/buying without paying the correct amount of fees
#478
c4-submissions
closed
9 months ago
3
Unchecked `redeemUnderlying` failure allows burning asD without redeeming NOTE, breaking peg.
#477
c4-submissions
closed
9 months ago
3
Analysis
#476
c4-submissions
opened
9 months ago
1
QA Report
#475
c4-submissions
closed
9 months ago
1
DOS Vulnerability on calculating price
#474
c4-submissions
closed
9 months ago
3
A malfunctioning bonding curve may break functionality for some shares
#473
c4-submissions
closed
9 months ago
7
platform will get 40 percent of fee if fee are below 100
#472
c4-submissions
closed
9 months ago
3
`shareData[_id].shareHolderRewardsPerTokenScaled` is updated with wrong value in `_splitFees()`
#471
c4-submissions
closed
9 months ago
3
QA Report
#470
c4-submissions
opened
9 months ago
1
Existing shares can continue operating after blacklisting their bonding curve address
#469
c4-submissions
closed
9 months ago
3
QA Report
#468
c4-submissions
closed
9 months ago
2
Price can be easily inflated/deflated by large depositors in the `Market` contract
#467
c4-submissions
closed
9 months ago
6
Next