code-423n4 2024-03-abracadabra-money-findings issues

code-423n4 / 2024-03-abracadabra-money-findings

9 stars 7 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Upgraded Q -> 2 from #225 [1712246404295]

#262 c4-judge closed 5 months ago
4
Upgraded Q -> 2 from #211 [1712245110382]

#261 c4-judge closed 5 months ago
4
Upgraded Q -> 2 from #133 [1712242552135]

#260 c4-judge closed 5 months ago
3
Upgraded Q -> 2 from #133 [1711869138645]

#258 c4-judge closed 5 months ago
3
Upgraded Q -> 2 from #201 [1711866729543]

#257 c4-judge closed 5 months ago
2
Upgraded Q -> 2 from #110 [1711726521685]

#256 c4-judge closed 5 months ago
3
Upgraded Q -> 2 from #214 [1711726473223]

#255 c4-judge closed 5 months ago
3
Upgraded Q -> 2 from #66 [1711726431783]

#254 c4-judge closed 5 months ago
3
Upgraded Q -> 2 from #212 [1711726155572]

#253 c4-judge closed 5 months ago
3
Upgraded Q -> 2 from #9 [1711726146822]

#252 c4-judge closed 5 months ago
3
Upgraded Q -> 2 from #210 [1711726131143]

#251 c4-judge closed 5 months ago
3
Upgraded Q -> 2 from #30 [1711724737603]

#250 c4-judge closed 5 months ago
3
Upgraded Q -> 2 from #30 [1711724632324]

#249 c4-judge closed 5 months ago
3
Upgraded Q -> 2 from #173 [1711724602224]

#248 c4-judge closed 5 months ago
3
Upgraded Q -> 3 from #133 [1711689547087]

#247 c4-judge closed 5 months ago
5
Retrieving Token Balances with balanceOf is dangerous

#246 c4-bot-10 closed 5 months ago
5
Retrieving Token Balances with balanceOf is dangerous

#245 c4-bot-2 closed 5 months ago
1
Ability to adjust _I_ creates sandwich opportunity

#244 c4-bot-5 closed 5 months ago
2
Denial of Service

#243 c4-bot-2 closed 5 months ago
6
Gas Optimizations

#242 c4-bot-9 opened 5 months ago
4
Gas Optimizations

#241 c4-bot-6 closed 5 months ago
3
Gas Optimizations

#240 c4-bot-6 closed 5 months ago
3
QA Report

#239 c4-bot-8 closed 5 months ago
2
Retrieving Token Balances with `balanceOf` is dangerous

#238 c4-bot-10 closed 5 months ago
1
Pool Creation Failure Due to WETH Transfer Compatibility Issue on Some Chains

#237 c4-bot-9 opened 5 months ago
7
Tokens yeild can not be set to claimable.

#236 c4-bot-10 opened 5 months ago
15
Analysis

#235 c4-bot-6 closed 5 months ago
6
Gas Optimizations

#234 c4-bot-5 opened 5 months ago
3
Oracle trust

#233 c4-bot-8 closed 5 months ago
5
When a trader swaps from a smart contract wallet, anyone could make them lose additional value through the trade.

#232 c4-bot-5 opened 5 months ago
8
Miscalculation in addLiquidity of Router results in unauthorized spending of tokens

#231 c4-bot-7 opened 5 months ago
15
Inconsistent Rounding in `_BASE_TARGET_` and `_QUOTE_TARGET_` will deviate away from true targets

#230 c4-bot-2 opened 5 months ago
6
Loss of gas yield in BlastMagicLP and BlastCauldronV4

#229 c4-bot-8 closed 5 months ago
6
Implementation of sqrt() is incorrect, used in pricing

#228 c4-bot-2 closed 5 months ago
12
Anyone making use of the MagicLP's TWAP to determine token prices will be exploitable.

#227 c4-bot-7 opened 5 months ago
9
Loss of assumed functionality of the Onboarding contract in a highly-sensitive area

#226 c4-bot-9 opened 5 months ago
7
A user's tokens could be locked for an extended duration beyond their intention and without their control

#225 c4-bot-9 opened 5 months ago
14
Rewards are lost when no one is staking

#224 c4-bot-6 closed 5 months ago
4
MagicLpAggregator always returns lower than correct answer, leading to arbitrage loss

#223 c4-bot-2 opened 5 months ago
7
Permanent loss of yield for stakers in reward pools due to precision loss.

#222 c4-bot-5 opened 5 months ago
8
Attacker can amplify a rounding error in MagicLP to break the I invariant and cause malicious pricing

#221 c4-bot-2 opened 5 months ago
24
Use of deprecated Chainlink function `latestAnswer`

#220 c4-bot-1 closed 5 months ago
4
Missing return statement

#219 c4-bot-6 closed 5 months ago
5
QA Report

#218 c4-bot-3 closed 5 months ago
2
Contract `MagicLpAggregator.sol` uses deprecated latestAnswer() function

#217 c4-bot-4 closed 5 months ago
4
No access control on init() in BlastCauldronV4 contract

#216 c4-bot-4 closed 5 months ago
7
Gas Optimizations

#215 c4-bot-4 closed 5 months ago
3
QA Report

#214 c4-bot-5 opened 5 months ago
3
`LockingMultiRewards::_userRewardLock` doesn't update when token is locked cause wrong reward calculation

#213 c4-bot-10 closed 5 months ago
6
QA Report

#212 c4-bot-10 opened 5 months ago
3