hats-finance Fenix-Finance-0x83dbe5aa378f3ce160ed084daf85f621289fb92f issues

hats-finance / Fenix-Finance-0x83dbe5aa378f3ce160ed084daf85f621289fb92f

0 stars 0 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

`MerklGaugeMiddleman.sol::_notifyReward` does not update when other functions call

#56 hats-bug-reporter[bot] opened 4 months ago
1
AlgebraPool.sol::mint The tick spacing validation issue

#55 hats-bug-reporter[bot] opened 4 months ago
1
Incorrect `POOL_INIT_CODE_HASH` will result in computation of incorrect pool address

#54 hats-bug-reporter[bot] opened 4 months ago
1
`voter` is not allowed to `addRewards`

#53 hats-bug-reporter[bot] opened 4 months ago
1
updating blast governor will not sync to already deployed contract, due to `BlastGovernorSetup` lack of update governor function

#52 hats-bug-reporter[bot] opened 4 months ago
1
`AlgebraFactory` lack of `DEFAULT_ADMIN_ROLE`

#51 hats-bug-reporter[bot] opened 4 months ago
2
Reward tokens can be stolen from the MerklGaugeMiddleman contract

#50 hats-bug-reporter[bot] opened 4 months ago
4
Insufficient validation of the arbitrary tokens and bribes provided by voters leads to the addition of incorrect rewards.

#49 hats-bug-reporter[bot] opened 4 months ago
1
Default rebasing YieldMode may break invariants

#48 hats-bug-reporter[bot] opened 4 months ago
1
Internal Bribe address can be set to the zero address

#47 hats-bug-reporter[bot] opened 4 months ago
1
Missing checks for same tokens in function createBribes will lead to the creation of incorrect bribes.

#46 hats-bug-reporter[bot] opened 4 months ago
5
First liquidity provider of a stable pair can DOS the pool

#45 hats-bug-reporter[bot] opened 4 months ago
1
Missing nonReentrant modifier on a state changing `VotingEscrowUpgradeable.checkpoint()` function

#44 hats-bug-reporter[bot] opened 4 months ago
1
`SwapRouter.sol` functions doesn't refund unspent ETH after swapping

#43 hats-bug-reporter[bot] opened 4 months ago
1
`rewardTokens` can be drained via. `emergencyRecoverERC20()`

#42 hats-bug-reporter[bot] opened 4 months ago
1
Reward tokens can get stuck in contract and DOS users

#41 hats-bug-reporter[bot] opened 4 months ago
1
Single-step process for critical ownership transfer is very risky

#40 hats-bug-reporter[bot] opened 4 months ago
2
Users can stil receive rebasing tokens even after claiming them.

#39 hats-bug-reporter[bot] opened 4 months ago
2
Voter in VotingEscrowUpgradeable can permanently lock user tokens

#38 hats-bug-reporter[bot] opened 4 months ago
1
AlgebraEternalFarming reward tokens are lost if tokens used is rebasing

#37 hats-bug-reporter[bot] opened 4 months ago
1
Protocol fees collected in PairFees are lost due to accrued yield

#36 hats-bug-reporter[bot] opened 4 months ago
5
delegateBySig can use malleable signatures

#35 hats-bug-reporter[bot] opened 4 months ago
1
VotingEscrow checkpoints is not synchronized

#34 hats-bug-reporter[bot] opened 4 months ago
1
Unused mapping

#33 hats-bug-reporter[bot] opened 4 months ago
1
UnsafeCasts `int256` to `uint256` and `int256` to `int128`

#32 hats-bug-reporter[bot] opened 4 months ago
3
Missing nonReentrant modifier on a state changing checkpoint function

#31 hats-bug-reporter[bot] opened 4 months ago
1
The timestamp variable of a checkpoint is not initialized

#30 hats-bug-reporter[bot] opened 4 months ago
3
Inconsistent between balanceOfNFT, balanceOfNFTAt and _balanceOfNFT functions

#29 hats-bug-reporter[bot] opened 4 months ago
1
First liquidity provider of a stable pair can DOS the pool

#28 hats-bug-reporter[bot] opened 4 months ago
1
Inflated voting balance due to duplicated veNFTs within a checkpoint

#27 hats-bug-reporter[bot] opened 4 months ago
5
Wrong logic in `_updateForAfterDistribution` can lead to massive overdistribution of rewards

#26 hats-bug-reporter[bot] opened 4 months ago
2
Missing events for functions that change critical parameters

#25 hats-bug-reporter[bot] opened 4 months ago
0
`BribeUpgradeable` is not meant to handle fee-on-transfer tokens

#24 hats-bug-reporter[bot] opened 4 months ago
3
`GaugeFactoryUpgradeable.setDistribution()` would revert due to incorrect access control

#23 hats-bug-reporter[bot] opened 4 months ago
1
`merklGaugeMiddleman` address could be different in factory and guage

#22 hats-bug-reporter[bot] opened 4 months ago
1
Voting tokens may be lost when given to non-EOA accounts

#21 hats-bug-reporter[bot] opened 4 months ago
3
`AlgebraPool.initialize` can be frontrun, preventing a new pool from being redeployed with the correct initial price

#20 hats-bug-reporter[bot] opened 4 months ago
1
`GaugeFactoryUpgradeable` will be useless if owner renounces ownership

#19 hats-bug-reporter[bot] opened 4 months ago
1
Not calling `update_period` for a week will fully lose the rewards for 2 weeks

#18 hats-bug-reporter[bot] opened 4 months ago
1
Wrong `DOMAIN_TYPEHASH` definition

#17 hats-bug-reporter[bot] opened 4 months ago
3
Frontrunning createPair() may lead to DOS

#16 hats-bug-reporter[bot] opened 4 months ago
1
`SwapRouter.sol` is vulnerable to address collission

#15 hats-bug-reporter[bot] opened 4 months ago
1
YieldMode not checked during a call to claim function.

#14 hats-bug-reporter[bot] opened 4 months ago
1
`BribeFactoryUpgradeable::addRewards` lacks array length match check

#13 hats-bug-reporter[bot] opened 4 months ago
4
Transfer returned value is not checked

#12 hats-bug-reporter[bot] opened 4 months ago
1
`AlgebraEternalFarming.exitFarming` function doesn't correctly exits farming

#11 hats-bug-reporter[bot] opened 4 months ago
1
User will not be able to withdraw if blacklisted for TOKEN

#10 hats-bug-reporter[bot] opened 4 months ago
1
No slippage protector

#9 hats-bug-reporter[bot] opened 4 months ago
1
No way to remove reward token

#8 hats-bug-reporter[bot] opened 4 months ago
1
EIP712 chainId is hardcoded which can cause replay attacks in case of hardfork

#7 hats-bug-reporter[bot] opened 4 months ago
2