issues
search
code-423n4
/
2024-05-olas-findings
12
stars
3
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Upgraded Q -> 2 from #115 [1720340805863]
#125
c4-judge
closed
2 months ago
2
Lack of support for specific tokens
#124
howlbot-integration[bot]
closed
2 months ago
1
Upgraded Q -> 2 from #114 [1720183356196]
#123
c4-judge
closed
2 months ago
4
Upgraded Q -> 2 from #108 [1720182372513]
#122
c4-judge
closed
2 months ago
3
Upgraded Q -> 2 from #108 [1720182273590]
#121
c4-judge
closed
2 months ago
2
Upgraded Q -> 2 from #7 [1720019193236]
#119
c4-judge
closed
2 months ago
2
Upgraded Q -> 2 from #34 [1720018773609]
#118
c4-judge
closed
2 months ago
2
Upgraded Q -> 2 from #34 [1720018599046]
#117
c4-judge
closed
2 months ago
2
QA Report
#115
howlbot-integration[bot]
opened
2 months ago
1
QA Report
#114
howlbot-integration[bot]
opened
2 months ago
6
QA Report
#113
howlbot-integration[bot]
closed
2 months ago
4
QA Report
#112
howlbot-integration[bot]
opened
2 months ago
2
Gas Optimizations
#111
howlbot-integration[bot]
closed
2 months ago
2
QA Report
#110
howlbot-integration[bot]
opened
2 months ago
1
QA Report
#109
howlbot-integration[bot]
closed
2 months ago
7
QA Report
#108
howlbot-integration[bot]
opened
2 months ago
6
QA Report
#107
howlbot-integration[bot]
opened
2 months ago
2
Desynchronized Nominee Data After Nominee Removal.
#106
howlbot-integration[bot]
closed
2 months ago
1
setFxChildTunnel Does Not Update l2TargetDispenser in PolygonDepositProcessorL1.sol (Potential Message Loss)
#105
howlbot-integration[bot]
closed
2 months ago
6
`stakingIncentive` is not transffered onto the next epoch which is a deviation from the spec
#104
howlbot-integration[bot]
closed
2 months ago
7
`timeSum` update make it impossible to update `getSum()` in the next week
#103
howlbot-integration[bot]
closed
2 months ago
5
If the underlying asset is a fee on transfer token, the `_withdraw` may fail
#102
howlbot-integration[bot]
closed
2 months ago
1
The StakingToken is incompatible with fee-on-transfer tokens
#101
howlbot-integration[bot]
closed
2 months ago
1
There is no way to get the refund through the Wormhole Bridge from L2 - L1
#100
howlbot-integration[bot]
closed
2 months ago
1
Refund address on Wormhole that is set as msg.sender may be different for different chains
#99
howlbot-integration[bot]
closed
2 months ago
19
Users cannot cancel their stake
#98
howlbot-integration[bot]
closed
2 months ago
2
Fee-on-transfer problem in the `StakingToken` contract
#97
howlbot-integration[bot]
closed
2 months ago
1
Users stake but receive almost no rewards
#96
howlbot-integration[bot]
closed
2 months ago
5
Removing last nominee in setNominees makes mapNomineeIds persist causing getter functions to err
#95
howlbot-integration[bot]
closed
2 months ago
1
Incorrect ID assignment in `removeNominee` when the last nominee is removed.
#94
howlbot-integration[bot]
closed
2 months ago
1
When removing nominees, the slope of pointsSum is not updated.
#93
howlbot-integration[bot]
closed
2 months ago
3
When revoking user voting power, the update of changesSum is not synchronized with pointsSum.
#92
howlbot-integration[bot]
closed
2 months ago
3
Wormhole uses Dispenser contract address as a refund address on l2 chain, resulting in a loss of funds
#91
howlbot-integration[bot]
closed
2 months ago
1
Service owner can fail to receive reward when `stakingToken` is a fee-on-transfer token
#90
howlbot-integration[bot]
closed
2 months ago
1
checkpoint function is not called before staking which can cause loss of rewards for already staked services.
#89
howlbot-integration[bot]
opened
2 months ago
13
Lack of access control when adding funds for staking can lead to unintended lockup for users
#88
howlbot-integration[bot]
closed
2 months ago
6
Excess token refund spent is not refunded back to senders in multiple places
#87
howlbot-integration[bot]
closed
2 months ago
1
Not decreasing the global slope when removing a nominee causes double subtraction of the bias in upcoming weeks.
#86
howlbot-integration[bot]
closed
2 months ago
3
Transferring reward from `StakingToken` contract to service owner can revert when `stakingToken` is a token that has balance changes outside of transfers
#85
howlbot-integration[bot]
closed
2 months ago
1
Incorrect callValueRefundAddress in createRetryableTicket function leads to cross-chain message not delivered
#84
howlbot-integration[bot]
closed
2 months ago
3
Dusting Staking contract can prevent unstaking
#83
howlbot-integration[bot]
closed
2 months ago
3
The refundAccount could loose fees, in Wormhole tx, if it is multisig wallet.
#82
howlbot-integration[bot]
closed
2 months ago
12
StakingBase.sol can’t handle fee-on-transfer token
#81
howlbot-integration[bot]
closed
2 months ago
1
Dispenser is unable to use excess gas refund for Arbitrum bridging
#80
howlbot-integration[bot]
closed
2 months ago
1
Dispenser is unable to control refunded tokens when bridging via Wormhole
#79
howlbot-integration[bot]
closed
2 months ago
1
Removing a nominee can brick the VoteWeighting.sol
#78
howlbot-integration[bot]
closed
2 months ago
3
if amountETHFromServices< accountRewards and topup is non zero, account doesn't receive rewards but it gets deducted from rewards balance
#77
howlbot-integration[bot]
closed
2 months ago
1
In ArbitrumDepositProcessorL1#_sendMessage, if refundAccount is 0, it is set to Dispenser contract, but the funds can't be used
#76
howlbot-integration[bot]
closed
2 months ago
1
BlackListed multisig will not be able to withdraw the funds.
#75
howlbot-integration[bot]
closed
2 months ago
7
Incorrect Mapping Update During Nominee Removal Leads to Inconsistent State
#74
howlbot-integration[bot]
closed
2 months ago
1
Next