code-423n4 2023-11-shellprotocol-findings issues

code-423n4 / 2023-11-shellprotocol-findings

7 stars 7 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Upgraded Q -> 2 from #52 [1702727357374]

#341 c4-judge closed 7 months ago
5
Upgraded Q -> 2 from #186 [1702725969627]

#340 c4-judge closed 7 months ago
5
Upgraded Q -> 2 from #236 [1702712918238]

#339 c4-judge closed 7 months ago
7
Upgraded Q -> 2 from #336 [1702651073475]

#338 c4-judge closed 7 months ago
6
Front-Running

#337 c4-bot-3 closed 7 months ago
5
QA Report

#336 c4-bot-3 opened 7 months ago
7
Incorrect Condition for Validating Input and Output Tokens in CurveTricryptoAdapter::_determineComputeType Function

#335 c4-bot-1 closed 7 months ago
4
convertedAmount set to zero because of bad math arithmetic

#334 c4-bot-1 closed 7 months ago
4
Unverified Primitives

#333 c4-bot-1 closed 7 months ago
5
Analysis

#332 c4-bot-1 opened 7 months ago
2
Some ERC20 tokens will send user balance when `amount = type(uint256).max `

#331 c4-bot-5 closed 7 months ago
8
REDUNDANT ERC1155 OCEAN TOKEN BALANCE UPDATE OF THE `OceanAdapter` CONTRACT COULD LEAD TO DoS OF THE `Ocean._computeOutputAmount` TRANSACTION

#330 c4-bot-5 closed 7 months ago
4
Batch Execution Failure

#329 c4-bot-5 closed 7 months ago
5
Incorrect Decimals Conversion in Curve2PoolAdapter::primitiveOutputAmount Function

#328 c4-bot-5 closed 7 months ago
3
Event Emission

#327 c4-bot-4 closed 7 months ago
5
Analysis

#326 c4-bot-5 opened 7 months ago
2
QA Report

#325 c4-bot-4 closed 7 months ago
3
Gas Optimizations

#324 c4-bot-5 closed 7 months ago
3
Compute Type Determination

#323 c4-bot-7 closed 7 months ago
5
Slippage Handling

#322 c4-bot-3 closed 7 months ago
4
Gas Optimizations

#321 c4-bot-3 closed 7 months ago
3
QA Report

#320 c4-bot-4 closed 7 months ago
3
Unbounded Approval

#319 c4-bot-4 closed 7 months ago
5
Truncated value is not returned

#318 c4-bot-4 closed 7 months ago
8
Gas Optimizations

#317 c4-bot-4 closed 7 months ago
5
Potential Gas and Overflow Issues with Decimal Shift Left in _convertDecimals Function

#316 c4-bot-1 closed 7 months ago
5
Limited functionality due to Primitive's balance being decreased before it is called

#315 c4-bot-1 closed 7 months ago
5
Potential Issues with Address Casting and Validation in _calculateOceanId Function

#314 c4-bot-1 closed 7 months ago
5
Gas Optimizations

#313 c4-bot-5 closed 7 months ago
3
QA Report

#312 c4-bot-9 closed 7 months ago
3
Analysis

#311 c4-bot-9 opened 7 months ago
3
Gas Optimizations

#310 c4-bot-9 closed 7 months ago
3
Incorrect token contract address used when calculating WRAPPED_ETHER_ID inside the constructor will break the protocol

#309 c4-bot-5 closed 7 months ago
14
Incorrect indexing in constructor of Curve Adapters causes both contracts to assume xToken and lpToken to be the same token

#308 c4-bot-5 closed 7 months ago
5
[H-02] The Ocean contract and the onERC721Received function is vulnerable to read-only re-entrancy

#307 c4-bot-5 closed 7 months ago
3
Lack of Validation and Potential Overflow in _fetchInteractionId Function

#306 c4-bot-5 closed 7 months ago
5
No slippage check while removing liquidity from Curve Pool

#305 c4-bot-5 closed 7 months ago
3
Analysis

#304 c4-bot-3 opened 7 months ago
2
Withdraws will be bricked if the curve pool gets killed

#303 c4-bot-9 closed 7 months ago
3
QA Report

#302 c4-bot-1 closed 7 months ago
3
Potential Gas Inefficiency due to Unnecessary abi.encode Usage

#301 c4-bot-1 closed 7 months ago
7
Analysis

#300 c4-bot-10 closed 7 months ago
2
Protocol is not ERC-1155 compliant

#299 c4-bot-10 opened 7 months ago
9
Division by Zero and Precision Loss in computeOutputAmount Function

#298 c4-bot-4 closed 7 months ago
3
Some NFT could able to by-pass 'charged fee` while un-wrapping their NFT

#297 c4-bot-10 closed 7 months ago
12
Gas Optimizations

#296 c4-bot-10 closed 7 months ago
3
_doMultiplenteractions can run out of gas due to undbounded loop

#295 c4-bot-10 closed 7 months ago
5
THE TRUNCATION OCCURED DUE TO DECIMAL CONVERSION IN THE `Curve2PoolAdapter.primitiveOutputAmount` FUNCTION IS IGNORED THUS LEADING TO LOSS OF FUNDS (FEES) TO THE `Ocean` PROTOCOL

#294 c4-bot-6 opened 7 months ago
8
Analysis

#293 c4-bot-6 closed 7 months ago
3
Core function of `Ocean` contract like `doInteraction | doMultipleInteractions | forwardedDoInteraction` may revert under certain conditions

#292 c4-bot-6 closed 7 months ago
3