issues
search
hats-finance
/
Convergence-Finance---IBO-0x0e410e7af8e70fc5bffcdbfbdf1673ee7b3d0777
IBO, Vesting & Bond mecanism repo prepared for Hat finance audit competition
0
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Unspecific Compiler Version Pragma
#41
hats-bug-reporter[bot]
opened
1 year ago
0
Unsafe ERC20 Operation(s)
#40
hats-bug-reporter[bot]
opened
1 year ago
1
Current `_computeCvgBondUsdPrice` logic is flawed
#39
hats-bug-reporter[bot]
opened
1 year ago
1
Incorrect assessment of isEthVerified can lead to DOS in Ibo contract
#38
hats-bug-reporter[bot]
opened
1 year ago
3
In case when curve admin disable the pool, the stale curve price oracle is still used
#37
hats-bug-reporter[bot]
opened
1 year ago
1
Incorrectly assumes that WETH is always the last token in the pool which leads to bad LP pricing
#36
hats-bug-reporter[bot]
opened
1 year ago
1
Curve oracle does not work for all curve pools, especially curve V1 pool
#35
hats-bug-reporter[bot]
opened
1 year ago
1
use `create2` instead of `create` to deploy
#34
hats-bug-reporter[bot]
opened
1 year ago
1
`calculateRelease` logic in `VestingCvg.sol` is flawed
#33
hats-bug-reporter[bot]
opened
1 year ago
2
Use safeMint instead of mint for ERC721
#32
hats-bug-reporter[bot]
opened
1 year ago
2
`_getPriceAggregator()` latestRoundData() has no check for round completeness
#31
hats-bug-reporter[bot]
opened
1 year ago
1
`_getPriceAggregator()` will return the wrong price for asset if underlying aggregator hits minAnswer
#30
hats-bug-reporter[bot]
opened
1 year ago
1
`_getPriceAggregator()` might return stale or incorrect results
#29
hats-bug-reporter[bot]
opened
1 year ago
1
Code doesn't work as per specification
#28
hats-bug-reporter[bot]
opened
1 year ago
1
Team and DAO vesting is flawed
#27
hats-bug-reporter[bot]
opened
1 year ago
1
msg.sender == tx.origin may not work in the future because of EIP 3074
#26
hats-bug-reporter[bot]
opened
1 year ago
1
Uniswap v2 price determined based on reserves can be manipulated
#25
hats-bug-reporter[bot]
opened
1 year ago
1
Seeds can release more tokens than anticipated.
#24
hats-bug-reporter[bot]
opened
1 year ago
1
_saleState check can be bypassed in Presale contract
#23
hats-bug-reporter[bot]
opened
1 year ago
1
There is no sequencer check in _getPriceAggregator which will lead to stale price on L2
#22
hats-bug-reporter[bot]
opened
1 year ago
1
`_getV3Price` will return incorrect results if tokens have different decimals
#21
hats-bug-reporter[bot]
opened
1 year ago
1
UniV3 oracle price is incorrect if `token0.decimals() > token1.decimals()`
#20
hats-bug-reporter[bot]
opened
1 year ago
1
Creating a new vesting schedule for the same vesting type will forever brick funds in the contract
#19
hats-bug-reporter[bot]
opened
1 year ago
1
Creating a new vesting schedule for a type overwrites the old one
#18
hats-bug-reporter[bot]
opened
1 year ago
1
Incorrect UniV2 price oracle for pools with different token decimals
#17
hats-bug-reporter[bot]
opened
1 year ago
2
SLOT 0 must not be used
#16
hats-bug-reporter[bot]
opened
1 year ago
1
Max CVG per Bond calculation is incorrect and will cause users to be able to mint much less then expected
#15
hats-bug-reporter[bot]
opened
1 year ago
1
Incorrect Stablecoin Price Calculation
#14
hats-bug-reporter[bot]
opened
1 year ago
2
Owner not set in the Ownable constructor
#13
hats-bug-reporter[bot]
opened
1 year ago
1
Users who are present in both the whitelist and the presale list can use both privileges
#12
hats-bug-reporter[bot]
opened
1 year ago
1
latestRoundData() in the CvgV3Aggregator oracle can return very stale data
#11
hats-bug-reporter[bot]
opened
1 year ago
1
CvgV3Aggregator latestPrice can be sandwitched for profit
#10
hats-bug-reporter[bot]
opened
1 year ago
3
`BondCalculator.computeCvgExpected` will always sum 1 to the result even if the division is exact.
#9
hats-bug-reporter[bot]
opened
1 year ago
1
`Ibo.sol` cannot work with USDT-like tokens
#8
hats-bug-reporter[bot]
opened
1 year ago
1
Missing input validation on `Ibo.createBond`
#7
hats-bug-reporter[bot]
opened
1 year ago
1
Floating Pragma is used
#6
hats-bug-reporter[bot]
opened
1 year ago
1
ChainlinkAdapterOracle will return the wrong price for asset if underlying aggregator hits minAnswer
#5
hats-bug-reporter[bot]
opened
1 year ago
1
Curve price calculation is manipultable due to read only reentrancy
#4
hats-bug-reporter[bot]
opened
1 year ago
4
Chainlink `latestRoundData` may return an stale result
#3
hats-bug-reporter[bot]
opened
1 year ago
1
UniswapV2 prices are calculated incorrectly
#2
hats-bug-reporter[bot]
opened
1 year ago
3
Test submission
#1
hats-bug-reporter[bot]
opened
1 year ago
0
Previous