code-423n4 2024-06-renzo-mitigation-findings issues

code-423n4 / 2024-06-renzo-mitigation-findings

0 stars 0 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

H-04 MitigationConfirmed

#58 c4-bot-10 opened 5 months ago
1
H-07 MitigationConfirmed

#57 c4-bot-9 opened 5 months ago
1
H-03 MitigationConfirmed

#56 c4-bot-5 opened 5 months ago
1
H-08 MitigationConfirmed

#55 c4-bot-7 opened 5 months ago
1
M-12 MitigationConfirmed

#54 c4-bot-2 opened 5 months ago
1
M-09 MitigationConfirmed

#53 c4-bot-6 opened 5 months ago
1
M-02 MitigationConfirmed

#52 c4-bot-10 opened 5 months ago
1
H-02 MitigationConfirmed

#51 c4-bot-5 opened 5 months ago
1
H-01 MitigationConfirmed

#50 c4-bot-3 opened 5 months ago
3
xRenzoDeposit can mint at invalid rates

#49 c4-bot-3 closed 5 months ago
4
H-04 Unmitigated

#48 c4-bot-7 closed 5 months ago
6
M-12 MitigationConfirmed

#47 c4-bot-3 opened 5 months ago
1
M-09 MitigationConfirmed

#46 c4-bot-5 opened 5 months ago
1
M-02 MitigationConfirmed

#45 c4-bot-5 opened 5 months ago
1
H-08 MitigationConfirmed

#44 c4-bot-10 opened 5 months ago
1
H-07 MitigationConfirmed

#43 c4-bot-4 opened 5 months ago
1
H-3 MitigationConfirmed

#42 c4-bot-8 opened 5 months ago
2
H-02 MitigationConfirmed

#41 c4-bot-9 opened 5 months ago
1
H-01 MitigationConfirmed

#40 c4-bot-3 opened 5 months ago
1
Honest users can lose funds when calling the `claim()` function.

#39 c4-bot-8 closed 5 months ago
2
[M-12] mitigation error: `getRate()` should not revert in all cases

#38 c4-bot-5 closed 5 months ago
10
H-04 Unmitigated

#37 c4-bot-1 closed 5 months ago
8
[M-02] mitigation error: `WithdrawQueue.claim()` should not be pausable

#36 c4-bot-8 closed 5 months ago
3
Calling `WithdrawQueue.claim()` can change the `RestakeManager`'s mint/redeem rate enabling value extraction exploit

#35 c4-bot-3 closed 5 months ago
14
`OperatorDelegator` withdrawals can be blocked by a single failing strategy

#34 c4-bot-7 closed 5 months ago
9
Ineffective Pausing Mechanism

#33 c4-bot-9 opened 5 months ago
4
M-12 MitigationConfirmed

#32 c4-bot-3 opened 5 months ago
4
M-09 MitigationConfirmed

#31 c4-bot-8 opened 5 months ago
4
M-02 MitigationConfirmed

#30 c4-bot-8 opened 5 months ago
4
M-12 MitigationConfirmed

#29 c4-bot-4 opened 5 months ago
1
OperatorDelegator will leak ezETH yield due to integrating an inconsistent gas refunds mechanism

#28 c4-bot-9 closed 5 months ago
2
The `ezETH should be minted or redeemed based on current supply and TVL` invariant has been broken by the fix applied to H-04 which also leads to unfair loss of assets for users

#27 c4-bot-10 closed 5 months ago
10
M-09 MitigationConfirmed

#26 c4-bot-7 opened 5 months ago
1
M-02 MitigationConfirmed

#25 c4-bot-9 opened 5 months ago
1
Some functionalities would often revert, due to protocol's assumption that the amount specified in a transfer is directly what's been received

#24 c4-bot-10 closed 5 months ago
6
H-08 MitigationConfirmed

#23 c4-bot-3 opened 5 months ago
1
H-07 MitigationConfirmed

#22 c4-bot-4 opened 5 months ago
1
An OperatorDelegator allocation limit can easily be exceeded by a very large arbitrarily amount

#21 c4-bot-1 closed 5 months ago
2
H-04 MitigationConfirmed

#20 c4-bot-3 opened 5 months ago
1
H-03 MitigationConfirmed

#19 c4-bot-9 opened 5 months ago
1
H-02 MitigationConfirmed

#18 c4-bot-6 opened 5 months ago
1
H-01 MitigationConfirmed

#17 c4-bot-1 opened 5 months ago
1
H-04 MitigationConfirmed

#16 c4-bot-8 opened 5 months ago
2
M-12 MitigationConfirmed

#15 c4-bot-3 opened 5 months ago
2
M-09 MitigationConfirmed

#14 c4-bot-10 opened 5 months ago
2
M-02 MitigationConfirmed

#13 c4-bot-10 opened 5 months ago
2
H-08 MitigationConfirmed

#12 c4-bot-10 opened 5 months ago
2
H-07 MitigationConfirmed

#11 c4-bot-5 opened 5 months ago
2
H-03 MitigationConfirmed

#10 c4-bot-2 opened 5 months ago
2
H-02 MitigationConfirmed

#9 c4-bot-1 opened 5 months ago
2