code-423n4 2024-06-badger-findings issues

code-423n4 / 2024-06-badger-findings

7 stars 5 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Upgraded Q -> 3 from #48 [1721695957843]

#50 c4-judge closed 4 months ago
6
QA Report

#49 howlbot-integration[bot] closed 4 months ago
1
QA Report

#48 howlbot-integration[bot] opened 4 months ago
4
QA Report

#47 howlbot-integration[bot] opened 4 months ago
2
QA Report

#46 howlbot-integration[bot] closed 4 months ago
1
Add Require Statement to Handle Potential Failures in _depositRawEthIntoLido Function

#45 howlbot-integration[bot] closed 4 months ago
3
Unchecked return value on call in the _convertRawEthToStETH function on the ZapRouterBase contract

#44 howlbot-integration[bot] closed 4 months ago
3
_doSwapChecks might fail to validate the expectedMinOut constraint.

#43 howlbot-integration[bot] closed 4 months ago
4
Wrong slippage control for the collateral shares for a cdp due to logical error in LeverageZapRouterBase._getPostCheckParams.

#42 howlbot-integration[bot] closed 4 months ago
3
`Operator.gte` is used for both increase or decrease CDP adjustments

#41 howlbot-integration[bot] closed 4 months ago
10
Low-level call return value is not checked

#40 howlbot-integration[bot] closed 4 months ago
3
Potential Collateral Requirement Oversight in CDP Adjustment Functions

#39 howlbot-integration[bot] closed 4 months ago
1
LeverageMacroBase::_doSwapChecks Misleading Balance Calculation Compromises Slippage Protection

#38 howlbot-integration[bot] closed 4 months ago
9
ZapRouterBase::_depositRawEthIntoLido Lacks Proper Validation Checks for Low-Level call

#37 howlbot-integration[bot] closed 4 months ago
2
Unchecked Low-Level Call in _depositRawEthIntoLido Function

#36 howlbot-integration[bot] closed 4 months ago
3
Unchecked .call() Low-Level Function Result

#35 howlbot-integration[bot] closed 4 months ago
2
Reverting all actions

#34 howlbot-integration[bot] closed 4 months ago
1
ETH Lockup Due to Lack of Error Handling in EbtcLeverageZapRouter Contract

#33 howlbot-integration[bot] closed 4 months ago
3
Failure in ETH to stETH Conversion Without User Feedback in EbtcLeverageZapRouter Contract

#32 howlbot-integration[bot] closed 4 months ago
3
Incorrect Comparison Logic in Post-Operation Checks

#31 howlbot-integration[bot] opened 4 months ago
10
Unchecked return value of the low-level call() in `_depositRawEthIntoLido` .

#30 howlbot-integration[bot] closed 4 months ago
4
Unchecked ETH Transfer in _depositRawEthIntoLido Function

#29 howlbot-integration[bot] closed 4 months ago
3
Deposit success on Lido is not checked which could lead to unexpected behavior

#28 howlbot-integration[bot] closed 4 months ago
3
The condition check for parameters in the _getPostCheckParams function is reversed

#27 howlbot-integration[bot] closed 4 months ago
3
Wrong judgment causes the user's check to not work

#26 howlbot-integration[bot] closed 4 months ago
2
If Lido eth deposit reverts all users deposited Eth will be locked in smart contract

#25 howlbot-integration[bot] closed 4 months ago
2
Unsafe Ether Deposit Using Low-Level call in _depositRawEthIntoLido function

#24 howlbot-integration[bot] closed 4 months ago
2
Incorrect comparison logic in `_doCheckValueType` leading to incorrect post-operation checks

#23 howlbot-integration[bot] closed 4 months ago
3
Missing the return value check when sending native ETH to Lido can result in mis-functioning of _adjustCDP and user's fund lost

#22 howlbot-integration[bot] closed 4 months ago
2
[H-1] `PostCheckParams` do not validate collateral correctly.

#21 howlbot-integration[bot] closed 4 months ago
2
Unchecked Return Value in Low-Level `call` Function

#20 howlbot-integration[bot] closed 4 months ago
3
Incorrect comparison logic in `_doCheckValueType` leading to incorrect post-operation checks

#19 howlbot-integration[bot] closed 4 months ago
3
Wrong `Operator` used for `expectedCollateral`

#18 howlbot-integration[bot] closed 4 months ago
9
Adjusting a CDP allows a user to reduce their collateral under the threshold enforced by the protocol

#17 howlbot-integration[bot] closed 4 months ago
6
`_depositRawEthIntoLido` doesn't check for after - before balance, can lead to first depositor vulnerability

#16 howlbot-integration[bot] closed 4 months ago
3
`LeverageMacroBase::_doOperation` will revert if `willSweep` is set to true

#15 howlbot-integration[bot] closed 4 months ago
6
Staking ETH incorrectly assumes revert bubbling

#14 c4-bot-8 opened 4 months ago
11
QA Report

#13 c4-bot-7 closed 4 months ago
1
openCdp，adjustCdp Sliding point control may fail

#12 c4-bot-9 closed 4 months ago
6
Price manipulation in the DEX

#11 c4-bot-5 closed 4 months ago
2
QA Report

#10 c4-bot-9 closed 4 months ago
1
ZapRouter Contract Can Retain Tokens, Breaking Invariant

#9 c4-bot-1 closed 4 months ago
3
Incorrect collateral calculation

#8 c4-bot-4 closed 4 months ago
2
Main variables - Position manager allows needs to be revoked after each operation can be bypassed

#7 c4-bot-1 closed 4 months ago
4
Update Readme

#6 liveactionllama closed 4 months ago
0
QA Report

#5 c4-bot-10 closed 4 months ago
1
QA Report

#4 c4-bot-9 closed 4 months ago
1
Both routers don't support third party delegating operations on CDP

#3 c4-bot-10 closed 4 months ago
3
test

#2 c4-bot-10 closed 4 months ago
1
Agreements & Disclosures

#1 code4rena-id[bot] opened 5 months ago
0