issues
search
code-423n4
/
2024-04-panoptic-findings
7
stars
3
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
`CREATE2` address collision during pool deployment allows for complete draining of the pool
#482
c4-bot-10
opened
4 months ago
5
Lack of Check on Equal Length of Owners and IDs (Potential Mismatch)
#481
c4-bot-1
closed
4 months ago
1
Attacker could manipulate the observationCardinality array and force computeInternalMedian/computeMedianObservedPrice return 0
#480
c4-bot-2
closed
4 months ago
2
Incorrect validation during checking liquidity spread
#479
c4-bot-10
opened
4 months ago
2
The Donated Full-range liquidity is minted to the `PanopticFactory` contract.
#478
c4-bot-2
closed
4 months ago
2
Incorrect OTM check in required collateral calculation
#477
c4-bot-2
closed
4 months ago
8
Incorrect force-exercising fee calculation
#476
c4-bot-10
closed
4 months ago
2
Potential DoS Attack via Large Input Arrays (Vector Length DoS)
#475
c4-bot-10
closed
4 months ago
1
Incorrect validation in force-exercising allows ITM positions be force-exercised
#474
c4-bot-10
closed
4 months ago
3
Malicious users will purchase dust amount of options to prevent option sellers from burning their options
#473
c4-bot-10
opened
4 months ago
6
The position could be minted in the SFPM directly, bypassing important checks in the PanopticPool.
#472
c4-bot-10
closed
4 months ago
2
QA Report
#471
c4-bot-1
closed
4 months ago
1
getLiquidationBonus function works incorrectly. Mitigation of the protocol loss ommited
#470
c4-bot-9
closed
3 months ago
4
Panoptic pool can be non-profitable by specific Uniswap governance
#469
c4-bot-7
opened
4 months ago
4
CollateralTracker lacks slippage protection
#468
c4-bot-5
closed
4 months ago
3
Incorrect token settlement in `CollateralTracker.sol`
#467
c4-bot-10
closed
4 months ago
3
Liquidation is not possible in turbulent market conditions
#466
c4-bot-5
closed
4 months ago
4
PanopticPool._validatePositionList can be tricked by overflowing position counter
#465
c4-bot-2
closed
4 months ago
3
Mint function being called in solmate/tokens/ERC721.sol does not check if the receiver of the NFT is a contract to avoid the NFT being lost.
#464
c4-bot-6
closed
4 months ago
2
_validatePositionList() positionIdList can forgery
#463
c4-bot-10
closed
4 months ago
4
_updateSettlementPostBurn() may not correctly reduce s_grossPremiumLast[chunkKey]
#462
c4-bot-10
opened
4 months ago
2
settleLongPremium() buyer should pay Premium
#461
c4-bot-10
closed
4 months ago
2
QA Report
#460
c4-bot-3
closed
4 months ago
1
When Burning a Tokenized Position `validate` should be done before flipping the `isLong` bits in `_validateAndForwardToAMM()`
#459
c4-bot-4
opened
4 months ago
3
QA Report
#458
c4-bot-6
closed
4 months ago
1
Potential overflow in `numberOfLeadingHexZeros`
#457
c4-bot-4
closed
4 months ago
2
End User ending up by paying extraa fee
#456
c4-bot-9
closed
4 months ago
2
`maxRedeem` and `maxWithdraw` can be manipulated to allow withdrawals with open positions
#455
c4-bot-6
closed
4 months ago
2
Users who attempt to convert assets to shares when the total assets are zero will experience transaction failures.
#454
c4-bot-6
closed
4 months ago
2
QA Report
#453
c4-bot-7
closed
4 months ago
1
Potential unbounded loop in `_validatePositionList` If a malicious user provides a very large `positionIdList`, this could exceed block gas limits and cause transactions to fail.
#452
c4-bot-7
closed
4 months ago
2
The actual owner of the force exercised position may suffer financial losses due to the unauthorized exercise of their position.
#451
c4-bot-7
closed
4 months ago
3
Delegatees may receive shares that do not correspond to the actual assets owned by the delegators, leading to discrepancies in the system.
#450
c4-bot-7
closed
4 months ago
1
Users may receive incorrect amounts of premium when minting or burning positions, leading to discrepancies in their expected rewards.
#449
c4-bot-7
closed
4 months ago
2
Users may receive incorrect amounts of liquidity tokens when minting or burning positions.
#448
c4-bot-4
closed
4 months ago
2
Slippage controls for calling `CollateralTracker` contract's `deposit` and `mint` functions are missing
#447
c4-bot-5
closed
4 months ago
2
QA Report
#446
c4-bot-9
opened
4 months ago
1
No DeadLine on uniswapV3 swap could lead to unfavorable swaps
#445
c4-bot-9
closed
4 months ago
2
The premium of liquidee is set incorrectly in the `PanopticPool.sol#liquidate` function.
#444
c4-bot-1
closed
4 months ago
5
Potential inconsistencies and loss of funds due to the lack of proper error handling and return value checks for the `_validateAndForwardToAMM` function calls.
#443
c4-bot-6
closed
4 months ago
1
There is an error in the fee processing of the `PanopticPool#forceExercise` function.
#442
c4-bot-3
closed
4 months ago
3
Liquidated account may end up in an inconsistent state, with incorrect balances, options, and premia.
#441
c4-bot-1
closed
4 months ago
1
Inconsistent state updates can cause unexpected behavior in other parts of the contract that rely on accurate position data.
#440
c4-bot-3
closed
4 months ago
1
QA Report
#439
c4-bot-10
opened
4 months ago
3
Overflow in CollateralTracker allows minting shares for free
#438
c4-bot-10
opened
4 months ago
3
Inconsistent rounding in the `computeMedianObservedPrice` function
#437
c4-bot-10
closed
4 months ago
3
Use of delegatecall in a payable function inside a loop
#436
c4-bot-2
closed
4 months ago
1
`mintTokenizedPosition` and `burnTokenizedPosition` can be Dos due to zero value transfer
#435
c4-bot-2
closed
4 months ago
5
ERC1155Minimal.sol Mint function can overflow if called numerous times for same id due to unchecked block
#434
c4-bot-2
closed
4 months ago
2
QA Report
#433
c4-bot-10
closed
4 months ago
1
Previous
Next