issues
search
code-423n4
/
2024-05-munchables-findings
3
stars
1
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Incorrect calculation of the remainder, when the lockdrop hasn't opened, can prevent users from obtaining NFTs in the next lock.
#465
howlbot-integration[bot]
closed
3 months ago
1
Users locking with a duration of lockdrop days or more do not get minted MUNCH NFTs from remainder accumulation or whole deposits hence cannot earn points or claim MUNCH tokens
#464
howlbot-integration[bot]
closed
3 months ago
1
If the migrationManager calls lock to an address that has a non-zero remainder, this address will lose its accounted remainder
#463
howlbot-integration[bot]
closed
3 months ago
3
If users migrate NFT, they may lose some of their unopened Munchables.
#462
howlbot-integration[bot]
closed
3 months ago
4
If the user executes the lock function not during the lockdrop period, the retainer may be lost.
#461
howlbot-integration[bot]
closed
3 months ago
1
Users can miss out on some rewards
#460
howlbot-integration[bot]
closed
3 months ago
1
Remainder can be cleared by attacker or user themselves unintentionally
#459
howlbot-integration[bot]
closed
3 months ago
6
`lockedToken.remainder` can get corrupted depending on when `lock()` is called
#458
howlbot-integration[bot]
closed
3 months ago
1
lockedToken.remainder is not handled properly during non-LockDrop period
#457
howlbot-integration[bot]
closed
3 months ago
1
User can lose his remainder for future lockdrop events
#456
howlbot-integration[bot]
closed
3 months ago
1
When `LockManager.lockOnBehalf` is called from `MigrationManager`, the user's `reminder` will be set to 0, resulting in fewer received `MunchableNFTs`
#455
howlbot-integration[bot]
opened
3 months ago
15
LockedToken Remainder Tracking will be Emptied and Lost When Block.timestamp is not Within Lock Period Range
#454
howlbot-integration[bot]
closed
3 months ago
5
`lockedToken.reminder` of a Previous Lock Resets to 0 If User/Attacker Locks Funds Between Two Lockdrop Events
#453
howlbot-integration[bot]
closed
3 months ago
1
When a player calls the lock() method outside the lockdrop timeframe, he/she loses the remainder amount
#452
howlbot-integration[bot]
closed
3 months ago
3
Locking outside of lockdrop periods erase one lock's remainder
#451
howlbot-integration[bot]
closed
3 months ago
1
Remainder is reset to 0 when subsequent lock is made outside the Lockdrop Period
#450
howlbot-integration[bot]
closed
3 months ago
1
A User can mint NFT with significantly less amount of token cause `remainder` not handeled in `unlock()`
#449
howlbot-integration[bot]
closed
3 months ago
2
User can earn extra nfts than deserved.
#448
howlbot-integration[bot]
closed
3 months ago
2
Users `remainder` is not reduced while unlocking tokens
#447
howlbot-integration[bot]
closed
3 months ago
2
Users Can Steal Nfts From The Lockdrop Because The Reminder Is Not Correctly Accounted For.
#446
howlbot-integration[bot]
closed
3 months ago
2
Incorrect accounting of `remainder` can result in user receiving one extra NFT with discounted price
#445
howlbot-integration[bot]
closed
3 months ago
1
Remainder not being deleted when unlocking tokens will cause some serious complications.
#444
howlbot-integration[bot]
closed
3 months ago
2
Missing logic to adjust `lockedToken.remainder` during `unlock` permits acquiring subsequent NFT without locking the required amount.
#443
howlbot-integration[bot]
closed
3 months ago
2
`lockedToken.remainder` is not subtracted when a user `unlock()` his assets
#442
howlbot-integration[bot]
closed
3 months ago
2
When user unlock all tokens, remainder value does not delete
#441
howlbot-integration[bot]
closed
3 months ago
1
The unlock method does not reset the 'remainder' variable, allowing NFTs to be minted with less locked funds.
#440
howlbot-integration[bot]
closed
3 months ago
2
A malicious user can receive nft for free or at discount
#439
howlbot-integration[bot]
closed
3 months ago
1
Players can steal funds from the `lockManager` preventing other users form unlocking the full amount of their withdrawals
#438
howlbot-integration[bot]
closed
3 months ago
2
Incorrect `remainder` calculation on repeated Lock/Unlock allows Munchanble without lock fund (2 for the price of one, or nft by 1 wei fund lock)
#437
howlbot-integration[bot]
closed
3 months ago
1
value of lockedToken.remainder is not reduced to zero even when the user has withdrawn all the tokens he locked.
#436
howlbot-integration[bot]
closed
3 months ago
2
The contract does not support rebasing tokens
#435
howlbot-integration[bot]
closed
3 months ago
1
LockManager does not handle Rebasing tokens properly
#434
howlbot-integration[bot]
closed
3 months ago
1
Rebasing rewards will get stuck on the contract forever or users may be unable to withdraw any tokens if rebasing tokens are deposited.
#433
howlbot-integration[bot]
closed
3 months ago
1
The PriceFeed can block the update of the price by creating a proposal immediately after the rejection of the previous one.
#432
howlbot-integration[bot]
closed
3 months ago
3
DOS in Price Updates Results in Stale Price Reporting
#431
howlbot-integration[bot]
closed
3 months ago
3
Stale Proposal Issue in USD Price Update Proposal Contract
#430
howlbot-integration[bot]
closed
3 months ago
4
approveUSDPrice/disapproveUSDPrice function param is price rather than proposal id
#429
howlbot-integration[bot]
closed
3 months ago
2
Problematic handling of token price updates
#428
howlbot-integration[bot]
closed
3 months ago
7
`call()` should be used instead of deprecated `transfer()` on an address payable
#427
howlbot-integration[bot]
closed
3 months ago
0
setLockDuration doesn't have unlockTimeLatest controls
#426
howlbot-integration[bot]
closed
3 months ago
0
setLockDuration doesn't have unlockTimeLatest controls
#425
howlbot-integration[bot]
closed
3 months ago
0
setLockDuration doesn't have unlockTimeLatest controls
#424
howlbot-integration[bot]
closed
3 months ago
0
Contract does not account for fee on transfer tokens
#423
howlbot-integration[bot]
closed
3 months ago
0
Contract does not account for fee on transfer tokens
#422
howlbot-integration[bot]
closed
3 months ago
0
Contract does not account for fee on transfer tokens
#421
howlbot-integration[bot]
closed
3 months ago
0
Contract does not account for fee on transfer tokens
#420
howlbot-integration[bot]
closed
3 months ago
0
Contract does not account for fee on transfer tokens
#419
howlbot-integration[bot]
closed
3 months ago
0
Protocol doesn't follow documentation. While docs states it supports high decimal tokens - protocol will revert when high decimal tokens are being used
#418
howlbot-integration[bot]
closed
3 months ago
0
User gets no NFT from subsequent token locks when initial locked quantity is less than nft cost.
#417
howlbot-integration[bot]
closed
3 months ago
0
Players can send funds using the lock method even outside the lockdrop timeframe
#416
howlbot-integration[bot]
closed
3 months ago
2
Previous
Next