code-423n4 2024-04-panoptic-findings issues

code-423n4 / 2024-04-panoptic-findings

7 stars 3 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

`CREATE2` address collision during pool deployment allows for complete draining of the pool

#482 c4-bot-10 opened 4 months ago
5
Lack of Check on Equal Length of Owners and IDs (Potential Mismatch)

#481 c4-bot-1 closed 4 months ago
1
Attacker could manipulate the observationCardinality array and force computeInternalMedian/computeMedianObservedPrice return 0

#480 c4-bot-2 closed 4 months ago
2
Incorrect validation during checking liquidity spread

#479 c4-bot-10 opened 4 months ago
2
The Donated Full-range liquidity is minted to the `PanopticFactory` contract.

#478 c4-bot-2 closed 4 months ago
2
Incorrect OTM check in required collateral calculation

#477 c4-bot-2 closed 4 months ago
8
Incorrect force-exercising fee calculation

#476 c4-bot-10 closed 4 months ago
2
Potential DoS Attack via Large Input Arrays (Vector Length DoS)

#475 c4-bot-10 closed 4 months ago
1
Incorrect validation in force-exercising allows ITM positions be force-exercised

#474 c4-bot-10 closed 4 months ago
3
Malicious users will purchase dust amount of options to prevent option sellers from burning their options

#473 c4-bot-10 opened 4 months ago
6
The position could be minted in the SFPM directly, bypassing important checks in the PanopticPool.

#472 c4-bot-10 closed 4 months ago
2
QA Report

#471 c4-bot-1 closed 4 months ago
1
getLiquidationBonus function works incorrectly. Mitigation of the protocol loss ommited

#470 c4-bot-9 closed 3 months ago
4
Panoptic pool can be non-profitable by specific Uniswap governance

#469 c4-bot-7 opened 4 months ago
4
CollateralTracker lacks slippage protection

#468 c4-bot-5 closed 4 months ago
3
Incorrect token settlement in `CollateralTracker.sol`

#467 c4-bot-10 closed 4 months ago
3
Liquidation is not possible in turbulent market conditions

#466 c4-bot-5 closed 4 months ago
4
PanopticPool._validatePositionList can be tricked by overflowing position counter

#465 c4-bot-2 closed 4 months ago
3
Mint function being called in solmate/tokens/ERC721.sol does not check if the receiver of the NFT is a contract to avoid the NFT being lost.

#464 c4-bot-6 closed 4 months ago
2
_validatePositionList() positionIdList can forgery

#463 c4-bot-10 closed 4 months ago
4
_updateSettlementPostBurn() may not correctly reduce s_grossPremiumLast[chunkKey]

#462 c4-bot-10 opened 4 months ago
2
settleLongPremium() buyer should pay Premium

#461 c4-bot-10 closed 4 months ago
2
QA Report

#460 c4-bot-3 closed 4 months ago
1
When Burning a Tokenized Position `validate` should be done before flipping the `isLong` bits in `_validateAndForwardToAMM()`

#459 c4-bot-4 opened 4 months ago
3
QA Report

#458 c4-bot-6 closed 4 months ago
1
Potential overflow in `numberOfLeadingHexZeros`

#457 c4-bot-4 closed 4 months ago
2
End User ending up by paying extraa fee

#456 c4-bot-9 closed 4 months ago
2
`maxRedeem` and `maxWithdraw` can be manipulated to allow withdrawals with open positions

#455 c4-bot-6 closed 4 months ago
2
Users who attempt to convert assets to shares when the total assets are zero will experience transaction failures.

#454 c4-bot-6 closed 4 months ago
2
QA Report

#453 c4-bot-7 closed 4 months ago
1
Potential unbounded loop in `_validatePositionList` If a malicious user provides a very large `positionIdList`, this could exceed block gas limits and cause transactions to fail.

#452 c4-bot-7 closed 4 months ago
2
The actual owner of the force exercised position may suffer financial losses due to the unauthorized exercise of their position.

#451 c4-bot-7 closed 4 months ago
3
Delegatees may receive shares that do not correspond to the actual assets owned by the delegators, leading to discrepancies in the system.

#450 c4-bot-7 closed 4 months ago
1
Users may receive incorrect amounts of premium when minting or burning positions, leading to discrepancies in their expected rewards.

#449 c4-bot-7 closed 4 months ago
2
Users may receive incorrect amounts of liquidity tokens when minting or burning positions.

#448 c4-bot-4 closed 4 months ago
2
Slippage controls for calling `CollateralTracker` contract's `deposit` and `mint` functions are missing

#447 c4-bot-5 closed 4 months ago
2
QA Report

#446 c4-bot-9 opened 4 months ago
1
No DeadLine on uniswapV3 swap could lead to unfavorable swaps

#445 c4-bot-9 closed 4 months ago
2
The premium of liquidee is set incorrectly in the `PanopticPool.sol#liquidate` function.

#444 c4-bot-1 closed 4 months ago
5
Potential inconsistencies and loss of funds due to the lack of proper error handling and return value checks for the `_validateAndForwardToAMM` function calls.

#443 c4-bot-6 closed 4 months ago
1
There is an error in the fee processing of the `PanopticPool#forceExercise` function.

#442 c4-bot-3 closed 4 months ago
3
Liquidated account may end up in an inconsistent state, with incorrect balances, options, and premia.

#441 c4-bot-1 closed 4 months ago
1
Inconsistent state updates can cause unexpected behavior in other parts of the contract that rely on accurate position data.

#440 c4-bot-3 closed 4 months ago
1
QA Report

#439 c4-bot-10 opened 4 months ago
3
Overflow in CollateralTracker allows minting shares for free

#438 c4-bot-10 opened 4 months ago
3
Inconsistent rounding in the `computeMedianObservedPrice` function

#437 c4-bot-10 closed 4 months ago
3
Use of delegatecall in a payable function inside a loop

#436 c4-bot-2 closed 4 months ago
1
`mintTokenizedPosition` and `burnTokenizedPosition` can be Dos due to zero value transfer

#435 c4-bot-2 closed 4 months ago
5
ERC1155Minimal.sol Mint function can overflow if called numerous times for same id due to unchecked block

#434 c4-bot-2 closed 4 months ago
2
QA Report

#433 c4-bot-10 closed 4 months ago
1

Previous Next