issues
search
hats-finance
/
Possum-Labs--Portals--0xed8965d49b8aeca763447d56e6da7f4e0506b2d3
GNU General Public License v2.0
0
stars
2
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Audit Report Draft Update
#81
shayzluf
opened
8 months ago
0
`Portal::unstake()` can inflate the Portal with PRINCIPAL_TOKEN
#80
hats-bug-reporter[bot]
opened
1 year ago
3
Incorrect Calculation of maxStakeDebt in Unstake Function
#79
hats-bug-reporter[bot]
opened
1 year ago
1
Incorrect Calculation of availableToWithdraw in Unstake Function
#78
hats-bug-reporter[bot]
opened
1 year ago
1
```Portal::burnBtokens``` user can't redeem PSM
#77
hats-bug-reporter[bot]
opened
1 year ago
1
The remained-$PSM balance of the `fundingRewardPool` will be stuck forever
#76
hats-bug-reporter[bot]
opened
1 year ago
1
A scenario where PSM_ADDRESS == reward Token the convert() will revert which will cause fundingRewardPool to be 0 forever
#75
hats-bug-reporter[bot]
opened
1 year ago
1
Unstake Function could Revert Due to Yield Source Withdraw Fee
#74
hats-bug-reporter[bot]
opened
1 year ago
2
Missing Return Minted Tokens Handling in Deposit to HLP_STAKING
#73
hats-bug-reporter[bot]
opened
1 year ago
2
Exchange Rate in `Portal::SellPortalEnergy()` can be influenced by user resulting in more PSM tokens than deserved
#72
hats-bug-reporter[bot]
opened
1 year ago
1
Funders will lose their deposited funds in the protocol when they attempt to exchange their bTokens to PSM in `Portal::burnBtokens()`
#71
hats-bug-reporter[bot]
opened
1 year ago
3
Missing Check for Ownership of Tokens in Constructor
#70
hats-bug-reporter[bot]
opened
1 year ago
1
Lack of Function for Receiving ETH
#69
hats-bug-reporter[bot]
opened
1 year ago
2
`fundingMaxRewards` can be set multiple times which can result in the decrease of the `fundingRewardPool` before all contributors redeem their bTokens
#68
hats-bug-reporter[bot]
opened
1 year ago
2
Contributor cannot re-claim PSM tokens if `fundingRewardPool` is zero .
#67
hats-bug-reporter[bot]
opened
1 year ago
1
Portal can be rendered un-usable using a simple front-back-run of convert() calls
#66
hats-bug-reporter[bot]
opened
1 year ago
3
If reward token = PRINCIPAL_TOKEN_ADDRESS then Contributors funds will be frozen and they'll receive 0 for their bTokens
#65
hats-bug-reporter[bot]
opened
1 year ago
14
MEV bots can front-run and grief arbitrageurs
#64
hats-bug-reporter[bot]
opened
1 year ago
3
Quote functions return incorrect values during funding phase
#63
hats-bug-reporter[bot]
opened
1 year ago
3
Initial PSM contributors will loose their funds
#62
hats-bug-reporter[bot]
opened
1 year ago
2
Users can end up paying AMOUNT_TO_CONVERT for spam tokens with no value
#61
hats-bug-reporter[bot]
opened
1 year ago
1
Lack of Considering Both Cases in Price Ratio for Principal Token and PSM Token
#60
hats-bug-reporter[bot]
opened
1 year ago
1
Upgradable contracts impose threat to the protocol
#59
hats-bug-reporter[bot]
opened
1 year ago
1
Some methods are missing existingAccount() modifier check
#58
hats-bug-reporter[bot]
opened
1 year ago
1
Vulnerability in Token Conversion Allows Unauthorized Withdrawal of bTokens
#57
hats-bug-reporter[bot]
opened
1 year ago
1
Vulnerability in Token Conversion Allows Unauthorized Withdrawal of bTokens
#56
hats-bug-reporter[bot]
opened
1 year ago
1
Users are currently disincentivized from contributing towards a new portal due to dependancy on fundingRewardPool
#55
hats-bug-reporter[bot]
opened
1 year ago
1
Rounding error vulnerability in buyPortalEnergy
#54
hats-bug-reporter[bot]
opened
1 year ago
1
`totalPrincipalStaked` may not reflect the real total deposited in external yield source
#53
hats-bug-reporter[bot]
opened
1 year ago
1
Unbounded Growth in Portal Energy
#52
hats-bug-reporter[bot]
opened
1 year ago
12
A malicious token can exploit the contract
#51
hats-bug-reporter[bot]
opened
1 year ago
5
portal doesn't consider principal token price
#50
hats-bug-reporter[bot]
opened
1 year ago
1
Portal Ignores Principal Token and PSM Price Ratio
#49
hats-bug-reporter[bot]
opened
1 year ago
3
Inadequate Consideration of Decimal Variations in Principal Tokens
#48
hats-bug-reporter[bot]
opened
1 year ago
3
Prevent Victim User From gaining portalEnergyEarned
#47
hats-bug-reporter[bot]
opened
1 year ago
4
A user can steal all the PSM tokens in the Portal contract
#46
hats-bug-reporter[bot]
opened
1 year ago
1
Can inflate portalEnergy
#45
hats-bug-reporter[bot]
opened
1 year ago
6
Can inflate portalEnergy
#44
hats-bug-reporter[bot]
opened
1 year ago
1
problem submitting
#43
hama-tech
opened
1 year ago
1
Phantom overflows can lead to unexpected reverts
#42
hats-bug-reporter[bot]
opened
1 year ago
1
Staking users can sell dust amounts of portal energy for all the PSM in the contract before portal is active
#41
hats-bug-reporter[bot]
opened
1 year ago
1
PSM token in the Portal contract can be drained by donating PSM token to the Portal contract before calling the sellPortalEnergy() function
#40
hats-bug-reporter[bot]
opened
1 year ago
4
Reward token can be unclaimable and stuck in an edge case
#39
hats-bug-reporter[bot]
opened
1 year ago
6
Codebase won't compile because a mismatch in openzeppelin and project solidity version
#38
hats-bug-reporter[bot]
opened
1 year ago
3
A Contributor can frontrun other contributor's `burnBtokens()` to maximize their pool share and burn the innocent contributors bTokens for zero rewards
#37
hats-bug-reporter[bot]
opened
1 year ago
5
Emit Events for State Changes in the convert Function
#36
hats-bug-reporter[bot]
opened
1 year ago
1
Possible to sandwich attack users due to a lack of zero value check for `_minReceived`
#35
hats-bug-reporter[bot]
opened
1 year ago
1
Rounding error when calculating with quoteBuyPortalEnergy
#34
hats-bug-reporter[bot]
opened
1 year ago
1
Users who have more portalEnergy than maxStakeDebt stand to lose their excess portalEnergy tokens if they call ForceUnstakeAll
#33
hats-bug-reporter[bot]
opened
1 year ago
1
Add a minimum threshold that must be met before activating the portal.
#32
hats-bug-reporter[bot]
opened
1 year ago
4
Next