issues
search
code-423n4
/
2024-02-hydradx-findings
1
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
MinPoolLiquidity safeguard can be bypassed in stable swap
#155
c4-bot-10
closed
6 months ago
4
Malicious liquidity provider can put pool into highly manipulatable state
#154
c4-bot-10
opened
6 months ago
10
Ann is calculated incorrectly
#153
c4-bot-4
closed
6 months ago
7
No slippage protection for adding liquidity in stableswap pool for add_liquidity()
#152
c4-bot-2
closed
6 months ago
2
In stableswap pool, add_liquidity_shares' s maximum share restriction can be bypassed in multiple ways
#151
c4-bot-6
closed
6 months ago
7
Insufficient origin verification in oracle activity handlers
#150
c4-bot-5
closed
6 months ago
5
In stableswap, Incorrect d value might be used in various trading and liquidity calculation, resulting in unfair reserve or share amount during trades
#149
c4-bot-8
opened
6 months ago
4
Donating 1 Unit of Tokens to a New Pool Could Block Users from Adding Liquidity
#148
c4-bot-7
opened
6 months ago
13
Missing deadline check in few functions
#147
c4-bot-9
opened
6 months ago
3
`remove_liquidity_one_asset()` and `sell()` functions has no slippage protection when using fee-on-transfer tokens
#146
c4-bot-7
closed
6 months ago
4
Incorrect asset_fee implementation in omnipool's buy methods, causing users always spending more compared to sell methods
#145
c4-bot-9
opened
6 months ago
7
A malicious user can block `remove_token` function in Omnipool by holding a tiny amount of shares
#144
c4-bot-5
opened
6 months ago
3
Analysis
#143
c4-bot-10
opened
6 months ago
6
[H04] Inefficient Liquidity removal form stableswap can lead to losses and MEV opportunities
#142
c4-bot-9
opened
6 months ago
5
The `on_liquidity_changed` hook is not called in some functions
#141
c4-bot-3
closed
6 months ago
8
The `update_oracle()` function can fail silently and thus result in a stale price
#140
c4-bot-10
closed
6 months ago
6
Various trading and liquidity management methods lack stale transaction protection, risks of invalid/outdated slippage protection values
#139
c4-bot-2
opened
6 months ago
8
`MinTradingLimit` check can be bypassed in `do_add_liquidity_shares()`
#138
c4-bot-6
opened
6 months ago
9
The state of an asset is not updated after a user sacrifice his position via `sacrifice_position()`
#137
c4-bot-8
closed
6 months ago
4
Analysis
#136
c4-bot-4
opened
6 months ago
2
In Omnipool, Users will be over charged withdrawal_fee when the withdrawal is safe.
#135
c4-bot-7
closed
5 months ago
4
QA Report
#134
c4-bot-9
opened
6 months ago
2
Stableswap.buy() Lack of Restrictions asset_in!=asset_out, Allows Users to Steal Funds
#133
c4-bot-2
closed
6 months ago
3
Missing Benchmarking in Omnipool
#132
c4-bot-5
closed
6 months ago
3
No access control on update_asset_state() public function in Omnipool contract can lead to user gaining more funds
#131
c4-bot-9
closed
6 months ago
7
Analysis
#130
c4-bot-3
opened
6 months ago
3
Inconsistent interval and lack of checks for outdated observations in EMA calculation
#129
c4-bot-2
closed
6 months ago
3
QA Report
#128
c4-bot-8
closed
6 months ago
2
Race Condition in Withdraw Function
#127
c4-bot-10
closed
6 months ago
3
False Circuit Breaker Activation due to Inaccurate Observations and Insufficient Disabling Conditions
#126
c4-bot-10
closed
6 months ago
2
Omnipool add and remove liquidity do not have slippage protection, LPs are at risk of loss due to price change
#125
c4-bot-1
closed
6 months ago
2
Analysis
#124
c4-bot-7
closed
6 months ago
2
No access control on set_position() public function in Omnipool contract can lead to user gaining more funds
#123
c4-bot-2
closed
6 months ago
6
QA Report
#122
c4-bot-1
opened
6 months ago
2
No access control on remove_asset() public function in Omnipool contract
#121
c4-bot-6
closed
6 months ago
6
Missing Deadline Parameter in Omnipool Buy and Sell Extrinsics Leads to Potential Loss of Funds
#120
c4-bot-3
opened
6 months ago
3
No access control on add_asset() public function in Omnipool contract
#119
c4-bot-2
closed
6 months ago
7
Bypassing Minimum Pool Liquidity Limit via Liquidity Removal Could Lead To DoS
#118
c4-bot-7
closed
6 months ago
5
Analysis
#117
c4-bot-1
opened
6 months ago
2
[M14] `add_token` in omnipool can be sandwich attacked for profit if a large amount of liquidity is being added
#116
c4-bot-6
closed
5 months ago
9
[M13] Missing `REMOVE_LIQUIDITY` check in `withdraw_protocol_liquidity` function in omnipool
#115
c4-bot-2
opened
6 months ago
7
[H03] `ensure_price` slippage control in omnipools can be bypassed with swaps
#114
c4-bot-6
closed
6 months ago
16
Analysis
#113
c4-bot-7
closed
6 months ago
2
Analysis
#112
c4-bot-2
closed
6 months ago
4
QA Report
#111
c4-bot-5
opened
6 months ago
4
Analysis
#110
c4-bot-1
closed
6 months ago
3
Analysis
#109
c4-bot-7
closed
6 months ago
2
Due to the use of strict checked arithmetic operations, particularly CheckedAdd, combined with net volume limits on an aggregate basis.
#108
c4-bot-10
closed
6 months ago
5
The totals approach the maximum u128 value, where checked arithmetic operations start failing transactions even if the limits are not crossed.
#107
c4-bot-7
closed
6 months ago
3
Block-Scoped Volume Counters Enable Constraint Bypass
#106
c4-bot-1
closed
6 months ago
3
Previous
Next