issues
search
code-423n4
/
2024-05-munchables-findings
3
stars
1
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Potential Loss of Rebasing Rewards in LockingMultiRewards Contract
#365
howlbot-integration[bot]
closed
5 months ago
0
Inaccurate Token Calculation for Rebasing Tokens
#364
howlbot-integration[bot]
closed
5 months ago
0
WETH/USDB rebasing issue in blast
#363
howlbot-integration[bot]
closed
5 months ago
0
USDB and WETH yield will be lost
#362
howlbot-integration[bot]
closed
5 months ago
0
Accrued Yield Lost Due to Rebasing Tokens (USDB) in Lock Mechanism
#361
howlbot-integration[bot]
closed
5 months ago
0
The yield of `USDB` and `WETH` will be locked in the `LockManager`
#360
howlbot-integration[bot]
closed
5 months ago
0
Incompatibility of LockManager Contract with Blast's Rebasing Mechanism
#359
howlbot-integration[bot]
closed
5 months ago
0
Unauthorized Token Locking in `lockOnBehalf` Function Allows Malicious Actors to Lock Tokens on Behalf of Other Users Without Permission
#358
howlbot-integration[bot]
closed
5 months ago
0
configuredTokenContracts can be blocked from updating unlockTime in setLockDuration
#357
howlbot-integration[bot]
closed
5 months ago
2
Wrong calculation of quantity and remainder leads to loss of fund
#356
howlbot-integration[bot]
closed
5 months ago
0
Rebasing Tokens USDB and WETH aren't handled correctly by lockManager
#355
howlbot-integration[bot]
closed
5 months ago
0
User will lose NFTs due to auto rebasing of USDB/WETH.
#354
howlbot-integration[bot]
closed
5 months ago
0
Lack of support for native USDB/WETH in `LockManager.sol`
#353
howlbot-integration[bot]
closed
5 months ago
0
unlock with partial quantity can cause user loss of rewards.
#352
howlbot-integration[bot]
closed
5 months ago
0
Users can gain rewards from unlock method more than it should be
#351
howlbot-integration[bot]
closed
5 months ago
2
`lastlockTime` isnt updated when users call `setLockDuration()`
#350
howlbot-integration[bot]
closed
5 months ago
0
Yeild for `ETH` will lost
#349
howlbot-integration[bot]
closed
5 months ago
2
USD price proposer can double vote for the USD price he proposed.
#348
howlbot-integration[bot]
closed
5 months ago
0
Incorrect Handling of Remainder Value in getLocked Function Leads to Inconsistent Contract State and Misleading User Experience
#347
howlbot-integration[bot]
closed
5 months ago
0
InvalidLockDurationError revert can cause a block for users when use lock method
#346
howlbot-integration[bot]
closed
5 months ago
2
WETH compatibility issue on Blast chain
#345
howlbot-integration[bot]
closed
5 months ago
0
Potential Smart Contract Configuration and Security Risks in Blockchain Deployment Script
#344
howlbot-integration[bot]
closed
5 months ago
0
The protocol does not implement the Blast yield claim method when rewardsManagerAddress is empty
#343
howlbot-integration[bot]
closed
5 months ago
0
Incorrect `deltaDecimal` Calculations in `getLockedWeightedValue` Resulting in Zero Value
#342
howlbot-integration[bot]
closed
5 months ago
0
Thresholds for approving and disapproving proposals cannot be properly set because of the incorrect datatype
#341
howlbot-integration[bot]
closed
5 months ago
0
A price feed role owner can remove previously set proposed USD prices at will by constantly setting new proposals and deleting the old one, possibly never allowing a proposal to actually ever go through
#340
howlbot-integration[bot]
closed
5 months ago
0
unlock function also uses notpaused modifier thus it can prevent the user to withdraw their tokens.
#339
howlbot-integration[bot]
closed
5 months ago
0
Tokens can be locked outside the "Lockdrop timeframe".
#338
howlbot-integration[bot]
closed
5 months ago
0
Unintended Update of USD Prices for Token Contracts with Non-Zero `nftCost`
#337
howlbot-integration[bot]
closed
5 months ago
0
Any attempt to lock ETH fails
#336
howlbot-integration[bot]
closed
5 months ago
0
Incorrect Assignment of tokenOwner Variable in lockOnBehalf Function
#335
howlbot-integration[bot]
closed
5 months ago
0
Lock will not update user position correctly and can cause theft of funds
#334
howlbot-integration[bot]
closed
5 months ago
0
Quick executing `_execUSDPriceUpdate()` upon reaching the `APPROVE_THRESHOLD` prevents accumulating sufficient disapproval votes to reject the proposal and leads to the establishment of a price that should have been rejected
#333
howlbot-integration[bot]
closed
5 months ago
2
The `lockedToken.quantity` can be unlinked from `nftOverlord.unrevealedNFTs` (quantity will be greater) when a user lock outside of the `lockdrop`, resulting in fewer received `MunchableNFTs`
#332
howlbot-integration[bot]
closed
5 months ago
2
Reentrancy Vulnerability in unlock Function
#331
howlbot-integration[bot]
closed
5 months ago
0
Users can withdraw the native token by passing a zero address in `_unlock`.
#330
howlbot-integration[bot]
closed
5 months ago
0
Automatic Approval by Proposer in proposeUSDPrice Function Reduces Required Approvals
#329
howlbot-integration[bot]
closed
5 months ago
0
Lack of Validation for `nftCost` in `configureToken` Function
#328
howlbot-integration[bot]
closed
5 months ago
0
Users receive incorrect amount of rewards when USD value is updated
#327
howlbot-integration[bot]
closed
5 months ago
0
Missing Handling of Unapproved USD Price Update Proposals Leads to Stale or Inconsistent Data
#326
howlbot-integration[bot]
closed
5 months ago
0
Users cannot withdraw their locked tokens if the contract is paused
#325
howlbot-integration[bot]
closed
5 months ago
0
approveUSDPrice() increases usdUpdateProposal.approvalsCount even if approve threshold is not reached
#324
howlbot-integration[bot]
closed
5 months ago
0
Incorrect Weighted Average Calculation in getLockedWeightedValue
#323
howlbot-integration[bot]
closed
5 months ago
0
Lack of Revert When DISAPPROVE_THRESHOLD Is Not Reached
#322
howlbot-integration[bot]
closed
5 months ago
0
USD proposals will never be proposed due to wrong implementation of zero check.
#321
howlbot-integration[bot]
closed
5 months ago
0
Players May Incur Losses Due to Price Discrepancy Between `nftCost` and `USD` Value of Configured Tokens
#320
howlbot-integration[bot]
closed
5 months ago
0
Players Who Lock Value Less Than the NFT Cost Won't Receive Any NFT during the lock period
#319
howlbot-integration[bot]
closed
5 months ago
0
Allowance cannot be used to unlock
#318
howlbot-integration[bot]
closed
5 months ago
0
Protocol's logic in regards to an NFT cost would cause the over/undervaluation of a locked position with time
#317
howlbot-integration[bot]
closed
5 months ago
0
proposal approve pass rate and disapprove pass rate are different
#316
howlbot-integration[bot]
closed
5 months ago
0
Previous
Next