issues
search
code-423n4
/
2024-07-munchables-findings
4
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Munchables can be staked with 0% Tax rate
#328
howlbot-integration[bot]
closed
1 month ago
2
`stakeMunchable` is allowing to stake against `plot which doesn't have metadata` which will prevent the landlord from earning his tax
#327
howlbot-integration[bot]
closed
1 month ago
1
Malicious user can take advantage of `unTriggeredPlotMetadata` to avoid taxRates
#326
howlbot-integration[bot]
closed
1 month ago
2
triggerPlotMetadata() can be frontrun to avoid taxRates
#325
howlbot-integration[bot]
closed
1 month ago
1
Attacker can stake and earn rewards tax free due to missing plot metadata initialization check
#324
howlbot-integration[bot]
closed
1 month ago
2
Users can start staking their munchables even though the landlord has not specified the taxrates
#323
howlbot-integration[bot]
closed
1 month ago
1
No check for ```plotMetadata[landlord].lastUpdated == 0``` in ```stakeMunchable()``` function
#322
howlbot-integration[bot]
closed
1 month ago
2
Non-triggeredPlotMetadata can be used for zero tax available plots
#321
howlbot-integration[bot]
closed
1 month ago
1
Upgraded Q -> 3 from #23 [1722887783819]
#319
c4-judge
closed
1 month ago
10
Upgraded Q -> 3 from #314 [1722887703631]
#318
c4-judge
closed
1 month ago
2
Incomplete Update of ToilerState in LandManager::transferToUnoccupiedPlot()
#317
thebrittfactor
closed
1 month ago
6
QA Report
#316
howlbot-integration[bot]
closed
1 month ago
2
QA Report
#315
howlbot-integration[bot]
closed
1 month ago
2
QA Report
#314
howlbot-integration[bot]
opened
1 month ago
4
QA Report
#313
howlbot-integration[bot]
opened
1 month ago
3
QA Report
#312
howlbot-integration[bot]
closed
1 month ago
6
QA Report
#311
howlbot-integration[bot]
closed
1 month ago
4
QA Report
#310
howlbot-integration[bot]
closed
1 month ago
2
QA Report
#309
howlbot-integration[bot]
closed
1 month ago
2
QA Report
#308
howlbot-integration[bot]
closed
1 month ago
3
Incorrect Staking Limit Check Allows Users to Exceed Intended Maximum of 10 Staked Munchables
#307
howlbot-integration[bot]
closed
1 month ago
2
Non-updated timestamp in `updateTaxRate` skews schnibble rewards for invalid plots
#306
howlbot-integration[bot]
closed
1 month ago
1
`transferToUnoccupiedPlot` fails to update `toilerState.plotId`, leading to incorrect plot tracking and could also unnecessarily mark plots as "dirty"
#305
howlbot-integration[bot]
closed
1 month ago
2
Deflation of Total Schnibbles Value Due to Error in Bonus Math Calculation
#304
howlbot-integration[bot]
closed
1 month ago
1
"munchablesStaked[mainAccount]" can be grater than 10.
#303
howlbot-integration[bot]
closed
1 month ago
2
Incorrect bonus calculation in `_farmPlots` function leading to undervaluation of `schnibblesTotal`
#302
howlbot-integration[bot]
closed
1 month ago
1
Unbounded Tax Rate Updates Enable Griefing Attacks
#301
howlbot-integration[bot]
closed
1 month ago
3
stakeMunchable() can be frontrunned by calling transferToUnoccupiedPlot to transfer to the plotId intended to be occupied by another staker to cause DOS
#300
howlbot-integration[bot]
closed
1 month ago
2
Missing `ToilerState[tokenId].plot` updatation in `transferToUnoccupiedPlot` leads to incorrect rewards calculation
#299
howlbot-integration[bot]
closed
1 month ago
2
NFT Staking Cap Exceeded Due to Conditional Check Error
#298
howlbot-integration[bot]
closed
1 month ago
2
Inconsistency between function implementation and documentation in triggerPlotMetadata()
#297
howlbot-integration[bot]
closed
1 month ago
2
Race Condition in Tax Rate Updates Enabling Potential Economic Exploitation on Blast L2
#296
howlbot-integration[bot]
closed
1 month ago
2
Overflows in 'farmPlots' function can leads to incorrect calculations and severe financial losses
#295
howlbot-integration[bot]
closed
1 month ago
2
Incorrect Schnibble Calculation Severely Impacts Game Economy
#294
howlbot-integration[bot]
closed
1 month ago
1
`LandManager::transferToUnoccupiedPlot` doesn't update the `toilerState[tokenId].plotId` variable
#293
howlbot-integration[bot]
closed
1 month ago
1
`LandManager::transferToUnoccupiedPlot` doesn't set `toilerState[tokenId].dirty` to false which leads to a user being unable to receive rewards
#292
howlbot-integration[bot]
closed
1 month ago
2
unfedSchnibbles are not being accounted for staked token with toiler state marked dirty
#291
howlbot-integration[bot]
closed
1 month ago
1
Users can own one plot for free because of improper check in `LandManager::_farmPlots`
#290
howlbot-integration[bot]
closed
1 month ago
1
A Malicious Staker Can Occupy His Landlord's All Plots With Only One Munchable
#289
howlbot-integration[bot]
closed
1 month ago
1
Incorrect calculation of total Schnibbles in farming plots
#288
howlbot-integration[bot]
closed
1 month ago
1
Malicious landlords can frontrun the call to `stakeMunchable` and increase their `currentTaxRate`
#287
howlbot-integration[bot]
closed
1 month ago
2
A toiler and its landlord can keep earning unintended Schnibbles from at most one dirty plot.
#286
howlbot-integration[bot]
closed
1 month ago
3
A staker can still stake more than the accepted max
#285
howlbot-integration[bot]
closed
1 month ago
2
`transferToUnoccupiedPlot` is lacking updating `dirty field` which prevent player from earning when farming
#284
howlbot-integration[bot]
closed
1 month ago
3
`transferToUnoccupiedPlot` is lacking updating `plotId field` which break farming accounting and might prevent player from earning when farming
#283
howlbot-integration[bot]
closed
1 month ago
2
`_farmPlots` is not detecting properly the `plot's dirtiness` which might allow player to earn even on an invalid plot
#282
howlbot-integration[bot]
closed
1 month ago
5
Critical states are not updated when transferrnig tokens to new plot
#281
howlbot-integration[bot]
closed
1 month ago
6
Incorrect check to verify if plotId exceeds available plots in `_farmPlots`
#280
howlbot-integration[bot]
closed
1 month ago
3
Integer overflow in Schnibbles Calculation Leading to Excessive Rewards
#279
howlbot-integration[bot]
closed
1 month ago
2
plotId in ToilerState is not being updated on transfer to Unoccupied plot
#278
howlbot-integration[bot]
closed
1 month ago
2
Next