issues
search
code-423n4
/
2023-11-shellprotocol-findings
7
stars
7
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Missing onlyOwner Modifier Will Give Access To Any Malicious User To Change UnwrapFee Immediately
#241
c4-bot-9
closed
10 months ago
4
Analysis
#240
c4-bot-1
opened
10 months ago
2
`Ocean.doMultipleInteractions()` cannot wrap ether
#239
c4-bot-5
closed
10 months ago
3
Gas Optimizations
#238
c4-bot-5
closed
10 months ago
3
QA Report
#237
c4-bot-5
closed
10 months ago
3
QA Report
#236
c4-bot-2
opened
10 months ago
4
Gas Optimizations
#235
c4-bot-8
closed
10 months ago
3
User can unwrap tokens in small amounts to avoid paying fee thereby resulting in loss to the protocol
#234
c4-bot-8
closed
10 months ago
11
Potential Incorrect Fee Calculation Due to Zero unwrapAmount in _calculateUnwrapFee Function
#233
c4-bot-2
closed
10 months ago
3
ocean._executeInteraction() fails to record the correct value for outputAmount for the case of interactionType == InteractionType.WrapErc20.
#232
c4-bot-7
closed
10 months ago
5
The else keyword is missing in _doMultipleInteractions
#231
c4-bot-3
closed
10 months ago
4
QA Report
#230
c4-bot-5
closed
10 months ago
3
QA Report
#229
c4-bot-4
closed
10 months ago
3
Gas Optimizations
#228
c4-bot-3
closed
10 months ago
3
Analysis
#227
c4-bot-4
opened
10 months ago
2
Analysis
#226
c4-bot-10
closed
10 months ago
3
Gas Optimizations
#225
c4-bot-8
closed
10 months ago
3
Gas Optimizations
#224
c4-bot-6
opened
10 months ago
3
Analysis
#223
c4-bot-9
opened
10 months ago
2
Specifying specifiedAmount to max doesn't always get the right amount into account
#222
c4-bot-4
closed
10 months ago
7
Owner has to perpetually pay fees to withdraw fees, resulting in dust amount left in the contract
#221
c4-bot-1
opened
10 months ago
6
Gas Optimizations
#220
c4-bot-4
opened
10 months ago
3
Analysis
#219
c4-bot-4
opened
10 months ago
2
Ocean.sol is not compliant with ERC165 standard as stated in the contest page
#218
c4-bot-5
closed
10 months ago
11
Analysis
#217
c4-bot-9
closed
10 months ago
3
Using ETH in doMultipleTransactions will cause the transaction to revert even though it is payable
#216
c4-bot-5
closed
10 months ago
3
Dust values are accounted for resulting in an amount of tokens with less than 1e18 decimals being lost in the contract
#215
c4-bot-4
closed
10 months ago
4
Timestamp is not checked in CurveTriCryptoAdapter when a user deposits which may cause transactions to be maliciously executed
#214
c4-bot-10
closed
10 months ago
7
Gas Optimizations
#213
c4-bot-6
closed
10 months ago
3
Payable keyword may revert due to a strict gas stipend of 23,000 units
#212
c4-bot-6
closed
10 months ago
3
Lack of error handling for external calls can lead to unexpected behavior
#211
c4-bot-6
closed
10 months ago
4
Analysis
#210
c4-bot-6
closed
10 months ago
3
Interactions with extremely high token amount will overflow and revert
#209
c4-bot-8
closed
10 months ago
3
Can sent interaction with more than userBalance, might result in wrong accounting in Ocean protocol
#208
c4-bot-5
closed
10 months ago
3
CurveTricryptAdapter::primitiveOutputAmount & Curve2PoolAdapter::primitiveOutputAmount can swap without slippage tolerance
#207
c4-bot-3
closed
10 months ago
4
Fee-on-transfer tokens is still accepted and will mess up the accounting logic in the Ocean ledger
#206
c4-bot-8
closed
10 months ago
3
The Ocean Ledger assumes that all ERC721 tokens are the same in a given collection
#205
c4-bot-8
opened
10 months ago
6
Missing Validation before Type Conversion
#204
c4-bot-8
closed
10 months ago
4
Adapter is incompatible with USDT because of lack of zero approval
#203
c4-bot-3
closed
10 months ago
4
Anyone can use utility functions of the tokens that were wrapped using the `Ocean`
#202
c4-bot-6
closed
10 months ago
8
Gas Optimizations
#201
c4-bot-8
closed
10 months ago
3
Analysis
#200
c4-bot-8
closed
10 months ago
2
Missing Fallback Function in Curve2PoolAdapter Smart Contract
#199
c4-bot-2
closed
10 months ago
4
imbalanced or invalid liquidity additions/removals could happen
#198
c4-bot-4
closed
10 months ago
4
Ocean: ERC20 tokens with fallback functions can be stolen
#197
c4-bot-7
closed
10 months ago
5
Replay Attack because EIP712 DOMAIN_SEPARATOR stored as immutable
#196
c4-bot-6
closed
10 months ago
3
Vulnerability where users could withdraw arbitrary tokens from the pool that they did not provide liquidity for
#195
c4-bot-2
closed
10 months ago
5
Analysis
#194
c4-bot-2
closed
10 months ago
3
Dos because of `_convertDecimals` return 0
#193
c4-bot-1
closed
10 months ago
3
When InteractionType is ComputeOutputAmount, users have to pay the fee twice and this will lead to loss of user fund
#192
c4-bot-1
closed
10 months ago
1
Previous
Next