code-423n4 2023-12-revolutionprotocol-findings issues

code-423n4 / 2023-12-revolutionprotocol-findings

3 stars 2 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Upgraded Q -> 2 from #341 [1705001382135]

#749 c4-judge closed 7 months ago
2
Upgraded Q -> 2 from #482 [1705001199242]

#748 c4-judge closed 7 months ago
2
Upgraded Q -> 2 from #530 [1705001094273]

#747 c4-judge closed 7 months ago
2
Upgraded Q -> 2 from #286 [1704653766013]

#745 c4-judge closed 7 months ago
2
Upgraded Q -> 2 from #530 [1704653218510]

#744 c4-judge closed 7 months ago
2
Upgraded Q -> 2 from #549 [1704652745528]

#743 c4-judge closed 7 months ago
2
Upgraded Q -> 2 from #643 [1704652543122]

#742 c4-judge closed 7 months ago
2
QA Report

#741 c4-bot-9 closed 7 months ago
2
If the NFT is because the auction is not met the `reservePrice` in `_settleAuction()` function, during the auction the totalSupply of erc721VotingToken is get in the quorumVotes, leading that the piece cannot be drpped

#740 c4-bot-9 closed 7 months ago
8
The `builderReferral`, `purchaseReferral` and `deployer` can never be equal to `address(0)`, which leads to the `revolutionRewardRecipient` stealing their rewards

#739 c4-bot-2 closed 7 months ago
5
QA Report

#738 c4-bot-2 closed 7 months ago
2
An attacker can front run buyer's `ERC20TokenEmitter::buyToken()` transaction which will give him less tokens than expected

#737 c4-bot-3 closed 8 months ago
5
Error Handling and Consistency in '_settleAuction' Function

#736 c4-bot-3 closed 8 months ago
3
Gas Optimizations

#735 c4-bot-6 opened 8 months ago
3
Error Handling in '_createAuction' Function

#734 c4-bot-10 closed 8 months ago
3
Gas Optimizations

#733 c4-bot-9 closed 7 months ago
4
QA Report

#732 c4-bot-9 closed 7 months ago
2
THE `WETH` FUNDS OF THE PREVIOUS BIDDER CAN GET STUCK IF THE FALLBACK IS CALLED IN THE `_safeTransferETHWithFallback` FUNCTION

#731 c4-bot-2 closed 8 months ago
4
`AuctionHous.sol` - Malicious actor can win auction unfavorably to the protocol by block stuffing

#730 c4-bot-2 opened 8 months ago
5
Insufficient input Sanitization could lead to XSS, CSRF on Users Browsers

#729 c4-bot-4 closed 8 months ago
4
auction.endTime can be increase using timeBuffer.

#728 c4-bot-2 closed 8 months ago
4
Input Validation for 'createBid' Function

#727 c4-bot-2 closed 8 months ago
3
The `creator` can perform a DoS attack which will make users unable to buy tokens

#726 c4-bot-10 closed 8 months ago
4
Business Logic Vulnerability in dropTopVotedPiece Function

#725 c4-bot-1 closed 8 months ago
3
Signature Verification for _verifyVoteSignature Function

#724 c4-bot-10 closed 8 months ago
3
QA Report

#723 c4-bot-6 closed 7 months ago
2
Signature Verification for batchVoteForManyWithSig Function

#722 c4-bot-6 closed 8 months ago
3
Signature Verification for voteForManyWithSig Function

#721 c4-bot-3 closed 8 months ago
3
Lack of sequencer uptime check can lead to unfair bidding order and delay the settlement of auctions

#720 c4-bot-1 opened 8 months ago
5
Input Validation for _vote Function

#719 c4-bot-6 closed 8 months ago
3
_verifyVoteSignature wrong implementation

#718 c4-bot-6 closed 8 months ago
3
Input Validation for createPiece Function

#717 c4-bot-10 closed 8 months ago
4
Signature Malleability in CultureIndex::_verifyVoteSignature function

#716 c4-bot-1 closed 7 months ago
8
Validate Creators Array

#715 c4-bot-5 closed 8 months ago
4
Values depending on the `VRGDAC` contract may be wrongly calculated due to possible precision loss.

#714 c4-bot-8 closed 7 months ago
6
Missing Input Validation for Media Type

#713 c4-bot-6 closed 8 months ago
4
Analysis

#712 c4-bot-5 opened 8 months ago
3
wrong implementation of maxHeap.extractMax();

#711 c4-bot-5 closed 7 months ago
4
Reverting when the heap is full

#710 c4-bot-5 closed 8 months ago
3
Efficiency

#709 c4-bot-5 closed 8 months ago
3
No access control on critical functions

#708 c4-bot-6 closed 8 months ago
3
Overflow potential

#707 c4-bot-6 closed 8 months ago
3
Use SafeMath for overflow protection

#706 c4-bot-6 closed 8 months ago
3
Error prone and complex code

#705 c4-bot-7 closed 8 months ago
3
Wrong comparison of `paymentAmountWei` in `RewardSplits::computeTotalReward` may lead to an user not being able to buy tokens

#704 c4-bot-1 closed 7 months ago
5
QA Report

#703 c4-bot-1 closed 7 months ago
2
Missing access control on critical functions

#702 c4-bot-3 closed 8 months ago
4
Incorrect Termination Condition

#701 c4-bot-10 closed 8 months ago
3
Analysis

#700 c4-bot-2 closed 7 months ago
2
Gas Optimizations

#699 c4-bot-2 opened 8 months ago
3