hats-finance Most--Aleph-Zero-Bridge-0xab7c1d45ae21e7133574746b2985c58e0ae2e61d issues

hats-finance / Most--Aleph-Zero-Bridge-0xab7c1d45ae21e7133574746b2985c58e0ae2e61d

Aleph Zero bridge to Ethereum

Apache License 2.0

0 stars 1 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Audit Report Draft Update

#75 shayzluf opened 3 months ago
0
`Migrations.upgrade()` should be removed from contract

#74 hats-bug-reporter[bot] opened 7 months ago
3
`set_committee` Implementation will lead to freezing of user funds

#73 hats-bug-reporter[bot] opened 7 months ago
4
Recover function should be decentralised

#72 hats-bug-reporter[bot] opened 7 months ago
1
Contracts are vulnerable to fee-on-transfer accounting-related issues

#71 hats-bug-reporter[bot] opened 7 months ago
1
Different pragma directives are used

#70 hats-bug-reporter[bot] opened 7 months ago
1
Incorrect modifier

#69 hats-bug-reporter[bot] opened 7 months ago
1
Incorrect modifier

#68 hats-bug-reporter[bot] opened 7 months ago
1
Missing zero address validation

#67 hats-bug-reporter[bot] opened 7 months ago
1
Deletion on mapping containing a structure

#66 hats-bug-reporter[bot] opened 7 months ago
1
Unprotected upgradeable contract

#65 hats-bug-reporter[bot] opened 7 months ago
1
WETH tokens sent to the Most contract will be temporarily locked

#64 hats-bug-reporter[bot] opened 7 months ago
3
Changing committee to a higher signature threshold will render a request from the previous committee un-processable

#63 hats-bug-reporter[bot] opened 7 months ago
5
Gas Optimization in `Most` contract

#62 hats-bug-reporter[bot] opened 7 months ago
1
Lack of Validation for WETH9 Contract Address

#61 hats-bug-reporter[bot] opened 7 months ago
2
Eth Lockup Risk in Most Contract's receiveRequest() Function

#60 hats-bug-reporter[bot] opened 7 months ago
1
Previous committee members can still call receiveRequest after committee update

#59 hats-bug-reporter[bot] opened 7 months ago
16
Calling _pause() in initialize() causes a denial of service by preventing all whenNotPaused functions from being called

#58 hats-bug-reporter[bot] opened 7 months ago
1
Incorrect revert message would create confusion leading to negative user experience

#57 hats-bug-reporter[bot] opened 7 months ago
1
Update the state of `data.pocket_money_balance` in `most/lib.rs` only if transfer succeeded.

#56 hats-bug-reporter[bot] opened 7 months ago
2
setCommittee function can set one member as the _committee and _signatureThreshold to one

#55 hats-bug-reporter[bot] opened 7 months ago
1
Locked tokens could be locked forever

#54 hats-bug-reporter[bot] opened 7 months ago
2
It's possible not to reach the required signature threshold

#53 hats-bug-reporter[bot] opened 7 months ago
2
Immutable `relay_gas_usage` will have issues after change in committee

#52 hats-bug-reporter[bot] opened 7 months ago
2
No Storage Gap for Upgradeable Contract Might Lead to Storage Slot Collision

#51 hats-bug-reporter[bot] opened 7 months ago
2
`set_gas_price_oracle()` should be called when the contract is halted

#50 hats-bug-reporter[bot] opened 7 months ago
2
Missing __UUPSUpgradeable_init() in Most.sol initialize function

#49 hats-bug-reporter[bot] opened 7 months ago
1
`send_request()` will always revert due to insufficient access validation

#48 hats-bug-reporter[bot] opened 7 months ago
1
relayers would be permanently inoperative due to permanent emergency

#47 hats-bug-reporter[bot] opened 7 months ago
2
Incorrect struct member order while emitting event

#46 hats-bug-reporter[bot] opened 7 months ago
3
`sendRequest()` and `sendRequestNative()` does not follow CEI pattern

#45 hats-bug-reporter[bot] opened 7 months ago
1
The contract doesn’t validate permissions correctly when adding new pair

#44 hats-bug-reporter[bot] opened 7 months ago
6
Fee-on-Transfer Tokens Could Cause Different Balances Between Ethereum and Azero Side

#43 hats-bug-reporter[bot] opened 7 months ago
1
Missing event emission during contract upgrade in `most/lib.rs::set_code`.

#42 hats-bug-reporter[bot] opened 7 months ago
1
The Upgraded `new_address` itself cannot be upgraded. Stucked in use forever

#41 hats-bug-reporter[bot] opened 7 months ago
2
`upgrade()` functionality is missing for `ink` based contracts migration

#40 hats-bug-reporter[bot] opened 7 months ago
1
Incorrect `event` emission in `accept_ownership()` function

#39 hats-bug-reporter[bot] opened 7 months ago
1
`requestNonce` must be initialize in `initialize()` function

#38 hats-bug-reporter[bot] opened 7 months ago
3
Delete call on ``pendingRequests[hash]`` does not clear the nested mapping for signatures

#37 hats-bug-reporter[bot] opened 7 months ago
1
rebasing Tokens Incompatible with `eth::most`

#36 hats-bug-reporter[bot] opened 7 months ago
1
Inadequate Address Check in `eth::most::_setCommittee`

#35 hats-bug-reporter[bot] opened 7 months ago
1
Inconsistency in Handling WETH in `eth::most::receiveRequest`

#34 hats-bug-reporter[bot] opened 7 months ago
8
Lack of total outstanding rewards in the contract which can prevent any unclaimed reward mistakenly removed

#33 hats-bug-reporter[bot] opened 7 months ago
1
Denial of service in `most/lib.rs::send_request` and `most/lib.rs::receive_request` when token owner change minter address after it has been added in the `supported_pairs`.

#32 hats-bug-reporter[bot] opened 7 months ago
1
Tokens with incorrect ERC20 implementation for return statements would emit failure events.

#31 hats-bug-reporter[bot] opened 7 months ago
2
Lack of possible changes on various gas variables

#30 hats-bug-reporter[bot] opened 7 months ago
1
Different variable type used between `Migrations.sol::last_completed_migration` and `migrations/lib.rs::last_completed_migration`.

#29 hats-bug-reporter[bot] opened 7 months ago
1
Missing zero price check in `gas-price-oracle::update_price`.

#28 hats-bug-reporter[bot] opened 7 months ago
2
committee_sizes is not properly updated

#27 hats-bug-reporter[bot] opened 7 months ago
13
Most will not work with tokens with high decimals due to overflow

#26 hats-bug-reporter[bot] opened 7 months ago
1