code-423n4 2024-02-uniswap-foundation-findings issues

code-423n4 / 2024-02-uniswap-foundation-findings

2 stars 3 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Upgraded Q -> 2 from #59 [1710724231052]

#421 c4-judge closed 6 months ago
2
Upgraded Q -> 2 from #169 [1710723624432]

#420 c4-judge closed 6 months ago
2
Upgraded Q -> 2 from #107 [1710723442623]

#419 c4-judge closed 6 months ago
2
Upgraded Q -> 2 from #90 [1710722654362]

#418 c4-judge closed 6 months ago
2
Upgraded Q -> 2 from #59 [1710425792478]

#416 c4-judge closed 6 months ago
3
Upgraded Q -> 2 from #61 [1710425733891]

#415 c4-judge opened 6 months ago
3
Upgraded Q -> 2 from #83 [1710425646079]

#414 c4-judge opened 6 months ago
3
Upgraded Q -> 2 from #314 [1710425233876]

#413 c4-judge opened 6 months ago
3
Upgraded Q -> 2 from #368 [1710425015688]

#412 c4-judge closed 6 months ago
3
Upgraded Q -> 2 from #107 [1710423399376]

#411 c4-judge opened 6 months ago
4
Upgraded Q -> 2 from #302 [1709855530999]

#410 c4-judge opened 7 months ago
3
Upgraded Q -> 2 from #321 [1709855396735]

#409 c4-judge opened 7 months ago
3
Upgraded Q -> 2 from #404 [1709855086604]

#408 c4-judge closed 7 months ago
2
Upgraded Q -> 2 from #382 [1709854904599]

#407 c4-judge closed 6 months ago
5
QA Report

#406 c4-bot-6 closed 7 months ago
1
Missing zero value will not update rewardPerTokenAccumulatedCheckpoint

#405 c4-bot-10 closed 7 months ago
2
QA Report

#404 c4-bot-10 closed 7 months ago
1
No max fee amount specified on factory

#403 c4-bot-3 closed 7 months ago
2
Re-entrancy in V3FactoryOwner.claimFees()

#402 c4-bot-7 closed 7 months ago
1
QA Report

#401 c4-bot-3 closed 7 months ago
1
Gas Optimizations

#400 c4-bot-3 closed 7 months ago
2
Analysis

#399 c4-bot-2 opened 7 months ago
4
Reward can get stuck in contract

#398 c4-bot-3 closed 7 months ago
3
Some tokens can become locked after delegation is rejected

#397 c4-bot-9 closed 7 months ago
1
Delegation should not be allowed to `address(0)`

#396 c4-bot-5 closed 7 months ago
1
Delegation should not be allowed to `address(0)`

#395 c4-bot-9 closed 7 months ago
2
Expose to Signature re-use

#394 c4-bot-10 closed 7 months ago
2
Analysis

#393 c4-bot-6 closed 6 months ago
1
During block reorgs, malicious user can grief unsuspecting stakers by frontrunning the deployment of surrogate contract, resulting in delegatee not having any votes.

#392 c4-bot-6 closed 7 months ago
2
Potential DOS if PAYOUT token is not equal to REWARD token

#391 c4-bot-4 closed 7 months ago
1
Altering a delegatee or staking more UNI tokens into another surrogate contract will not increase the votes of the delegatee

#390 c4-bot-4 closed 7 months ago
2
Analysis

#389 c4-bot-3 opened 7 months ago
1
Small stakes reward griefing due to rounding, and actions by anyone with nothing at stake

#388 c4-bot-5 opened 7 months ago
13
`_alterBeneficiary` would be used to abuse the reward accumulation. Same beneficiary can be swapped before any reward accumulation operation.

#387 c4-bot-1 closed 7 months ago
2
UniStaker.sol : `lastCheckpointTime` update is done at incorrect place. this will avert the reward accumulation to users.

#386 c4-bot-1 closed 7 months ago
2
QA Report

#385 c4-bot-6 closed 6 months ago
1
The `on behalf` functions currently do not include a deadline parameter

#384 c4-bot-7 closed 6 months ago
8
Economic attack to lock fraction of rewards in Unistaker permanently

#383 c4-bot-1 closed 7 months ago
2
QA Report

#382 c4-bot-3 closed 7 months ago
1
Analysis

#381 c4-bot-5 closed 6 months ago
1
MEV bots can be tricked with fake pools

#380 c4-bot-1 opened 7 months ago
14
Claiming all fees results in unexpected revert

#379 c4-bot-2 opened 7 months ago
3
Analysis

#378 c4-bot-4 closed 7 months ago
1
QA Report

#377 c4-bot-2 closed 6 months ago
1
Initial rewards can get locked in UniStaker contract

#376 c4-bot-8 closed 7 months ago
3
`UniStaker::unclaimedReward` Does Not Account For Accumulated Rewards Because of Round Down To Zero

#375 c4-bot-10 closed 6 months ago
8
`rewardPerTokenAccumulated` can be inflated drastically when total staked decreases, making users not getting their rewards

#374 c4-bot-10 closed 7 months ago
2
The Uniswap V3 Factory Owner Contract lacks control over the global protocol fee.

#373 c4-bot-8 closed 7 months ago
2
Due to the gas saving mechanism of the uniswap pool’s collectProtocol method, the auctions may often revert griefly.

#372 c4-bot-8 opened 7 months ago
3
QA Report

#371 c4-bot-2 closed 6 months ago
1