code-423n4 2024-06-size-findings issues

code-423n4 / 2024-06-size-findings

3 stars 1 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Upgraded Q -> 2 from #431 [1721064637397]

#435 c4-judge closed 3 months ago
3
Invalid CR validation in `Size::compensate`, blocking users from compensating their loans

#434 howlbot-integration[bot] closed 3 months ago
1
Invalid CR validation in `Size::withdraw`, blocking liquidatable users from withdrawing their borrow tokens

#433 howlbot-integration[bot] closed 3 months ago
1
Users can not withdraw USDC when they are below the opening limit borrow CR

#432 howlbot-integration[bot] closed 3 months ago
1
QA Report

#431 howlbot-integration[bot] closed 3 months ago
6
Users will not be able to withdraw their USDC in some cases

#430 howlbot-integration[bot] closed 3 months ago
2
The validateUserIsNotBelowOpeningLimitBorrowCR in withdraw can lead to DOS

#429 howlbot-integration[bot] closed 3 months ago
1
Users cant withdraw borrowATokens if they are under the opening collateral limit

#428 howlbot-integration[bot] closed 3 months ago
1
Users can not withdraw and use their borrowed USDC tokens if their collateral ratio is below openingLimitBorrow CR

#427 howlbot-integration[bot] closed 3 months ago
1
Borrow Token Withdrawals Blocked Due to Incorrect Opening Collateral Ratio Check

#426 howlbot-integration[bot] closed 3 months ago
2
Withdrawal can fail even if user is not underwater

#425 howlbot-integration[bot] closed 3 months ago
1
Upgraded Q -> 2 from #127 [1720838804248]

#424 c4-judge closed 3 months ago
2
Upgraded Q -> 2 from #127 [1720808187424]

#423 c4-judge closed 3 months ago
2
Upgraded Q -> 2 from #162 [1720801701434]

#422 c4-judge closed 3 months ago
4
Upgraded Q -> 3 from #154 [1720800168546]

#421 c4-judge closed 3 months ago
1
Upgraded Q -> 2 from #9 [1720799294393]

#420 c4-judge closed 3 months ago
2
Upgraded Q -> 2 from #135 [1720794005467]

#419 c4-judge closed 3 months ago
2
Upgraded Q -> 3 from #154 [1720766630616]

#418 c4-judge closed 4 months ago
2
Upgraded Q -> 2 from #167 [1720762269870]

#417 c4-judge closed 4 months ago
2
Upgraded Q -> 2 from #167 [1720717432071]

#416 c4-judge closed 4 months ago
2
Upgraded Q -> 2 from #160 [1720717312482]

#415 c4-judge closed 4 months ago
2
Upgraded Q -> 2 from #154 [1720714898261]

#414 c4-judge closed 4 months ago
2
The total supply of borrowAToken can go over the specified cap

#413 howlbot-integration[bot] closed 4 months ago
4
Liquidators will never profit from liquidations

#412 howlbot-integration[bot] closed 4 months ago
3
Wrong calculation of `fees` in `SellCreditMarket` when `params.exactAmountIn == false` and `params.creditPositionId == RESERVED_ID`

#411 howlbot-integration[bot] closed 4 months ago
2
Incorrect calculation of liquidator reward in Liquidate.sol leads to failed liquidations

#410 howlbot-integration[bot] closed 4 months ago
3
Incorrect Credit Amount Calculation in `getCreditAmountIn` Function Due to Improper Fragmentation Fee Handling

#409 howlbot-integration[bot] closed 4 months ago
1
Double-Counting of Fragmentation Fee in getCashAmountIn Function Leads to Incorrect Calculations

#408 howlbot-integration[bot] closed 4 months ago
1
Invalid comparison when computing the liquidator's reward in `executeLiquidate`

#407 howlbot-integration[bot] closed 4 months ago
4
Inconsistent fees in `sellCreditMarket` when passing amount as credit or cash

#406 howlbot-integration[bot] closed 4 months ago
3
A borrower can force set other lender's credit position for sale, by calling compensate and passing `RESERVED ID`

#405 howlbot-integration[bot] closed 4 months ago
2
Muticall deposits entirely bypass the borrowAToken cap

#404 howlbot-integration[bot] closed 4 months ago
3
Some users will be required to borrow a higher amount of tokens than others

#403 howlbot-integration[bot] closed 4 months ago
1
Fragmentation fees aren't being paid in the context of partial repayment in `Size::compensate`

#402 howlbot-integration[bot] closed 4 months ago
2
Malicious lenders can force borrowers into fragmenting their credit positions

#401 howlbot-integration[bot] closed 4 months ago
5
Wrong calculation of `liquidatorReward` in `executeLiquidate`

#400 howlbot-integration[bot] closed 4 months ago
3
Users can deposit USDC above the AToken cap

#399 howlbot-integration[bot] closed 4 months ago
3
Bad debt cannot be liquidated when contract is paused

#398 howlbot-integration[bot] closed 4 months ago
1
Wrong check when `buyCreditMarket` is been called with `param.exactAmountIn` equal to true.

#397 howlbot-integration[bot] closed 4 months ago
5
Incorrect calculation of the cap on the liquidation reward leads to loss of funds

#396 howlbot-integration[bot] closed 4 months ago
3
The `borrowATokenCap` can be bypassed

#395 howlbot-integration[bot] closed 4 months ago
3
Users can avoid paying fragmentation fees

#394 howlbot-integration[bot] closed 4 months ago
3
Because of a decimal issue, the liquidator gets next to nothing as a liquidation rewards when liquidating a borrow position

#393 howlbot-integration[bot] closed 4 months ago
3
Whales might not be able to get liquidated due to no way to partially liquidate

#392 howlbot-integration[bot] closed 4 months ago
2
Users might not be able to withdraw USDC from the protocol

#391 howlbot-integration[bot] closed 3 months ago
11
Debt repayment and collateral loss risk if Size contract is paused

#390 howlbot-integration[bot] closed 4 months ago
1
Inconsistent Fee Deduction in SellCreditMarket (exactAmountIn=false)

#389 howlbot-integration[bot] closed 4 months ago
6
BuyCreditMarket: Missing Fee Deduction from Buyer Payment (exactAmountIn=true)

#388 howlbot-integration[bot] closed 4 months ago
4
liquidatorReward is Incorrectly calculated: Inconsistent Units

#387 howlbot-integration[bot] closed 4 months ago
3
`executeLiquidate()` liquidaterReward is totally underestimated because the computation computes `futureValue` as 6 decimals

#386 howlbot-integration[bot] closed 4 months ago
2