issues
search
sherlock-audit
/
2022-09-notional-judging
4
stars
2
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
lemonmon - `TradingUtils::_executeTrade` will withdraw/deposit the whole balance
#96
sherlock-admin
closed
1 year ago
0
ctf_sec - BAL_TOKEN and AURA_TOKEN are hardcoded into the LIQUIDITY_GAUGE token reward in AuraStakingMixin.sol
#95
sherlock-admin
closed
1 year ago
2
ctf_sec - Usage of deprecated transfer() can result in revert, BaseStrategyVault.sol usage of payable(address).transfer, not _to.call{value: msg.value}("") when handling ETH transfer
#94
sherlock-admin
closed
1 year ago
0
xiaoming90 - Boosted Balancer Leverage Vault Might Not Be Able To Exit Its Position
#93
sherlock-admin
closed
1 year ago
3
ctf_sec - CurveAdapter.sol does support function exchange_underlying method.
#92
sherlock-admin
closed
1 year ago
0
ctf_sec - sqrtPriceLimitX96 parameter is hardcoded to 0 in UniV3Adapter.sol
#91
sherlock-admin
closed
1 year ago
0
ctf_sec - UniV2Adapter.sol does not implement swapExactTokensForTokensSupportingFeeOnTransferTokens
#90
sherlock-admin
closed
1 year ago
0
ctf_sec - Two functions in TradingModule.sol both use initializer modifiers, one of the initializer will fail and contract will be not be initialized properly.
#89
sherlock-admin
closed
1 year ago
0
xiaoming90 - No Validation Check Against Decimal Of Secondary Token
#88
sherlock-admin
opened
1 year ago
3
xiaoming90 - Assets In A Vault Account That Needs To Be Deleveraged Can Be Stolen Via Re-Entrancy Attack
#87
sherlock-admin
closed
1 year ago
0
xiaoming90 - Malicious 0x Order Can Extract Value From The Vault During Trade
#86
sherlock-admin
closed
1 year ago
1
xiaoming90 - Malicious User Can Steal All Assets From A Vault When Exiting The Vault By Performing A Re-Entrancy Attack
#85
sherlock-admin
closed
1 year ago
1
xiaoming90 - No Settlement Cooldown On `CrossCurrencyfCashVault`
#84
sherlock-admin
closed
1 year ago
2
xiaoming90 - Gain From Balancer Vaults Can Be Stolen
#83
sherlock-admin
opened
1 year ago
4
xiaoming90 - Malicious Users Can Deny Notional Treasury From Receiving Fee
#82
sherlock-admin
opened
1 year ago
5
xiaoming90 - Permissionless `settleVault` Function Within `CrossCurrencyfCashVault` Vault Can Be Exploited To Steal Profit
#81
sherlock-admin
closed
1 year ago
1
xiaoming90 - Deposit Cannot Be Used For Repayment When Rolling Position
#80
sherlock-admin
closed
1 year ago
1
xiaoming90 - `CrossCurrencyfCashVault` Cannot Settle Its Assets In Pieces
#79
sherlock-admin
opened
1 year ago
1
xiaoming90 - Using Balancer Math Functions With Incorrect Precision
#78
sherlock-admin
closed
1 year ago
2
xiaoming90 - Vulnerable Internal Price Oracle
#77
sherlock-admin
closed
1 year ago
3
xiaoming90 - Balancer Vault Will Receive Fewer Assets As The Current Design Does Not Serve The Interest Of Vault Shareholders
#76
sherlock-admin
opened
1 year ago
4
xiaoming90 - Bought/Purchased Token Can Be Sent To Attacker's Wallet Using 0x Adaptor
#75
sherlock-admin
opened
1 year ago
2
xiaoming90 - Slippage Control `trade.limit` Is Ignored By 0x Adaptor
#74
sherlock-admin
closed
1 year ago
1
xiaoming90 - Existing Slippage Control Can Be Bypassed During Vault Settlement
#73
sherlock-admin
opened
1 year ago
3
xiaoming90 - Emergency Vault Settlement Process Do Not Verify That The Vault Receives The Appropriate Amount Of Primary Tokens After Sale Of Secondary Tokens
#72
sherlock-admin
closed
1 year ago
1
xiaoming90 - Normal Settlement Process Do Not Verify That The Vault Receives The Appropriate Amount Of Primary Tokens After Sale Of Secondary Tokens
#71
sherlock-admin
closed
1 year ago
1
xiaoming90 - Vault Share/Strategy Token Calculation Can Be Broken By First User/Attacker
#70
sherlock-admin
opened
1 year ago
2
xiaoming90 - Boosted Balancer Leverage Vault Vulnerable To Price Manipulation
#69
sherlock-admin
closed
1 year ago
4
xiaoming90 - Existing Slippage Control Can Be Bypassed During Reinvest Rewards
#68
sherlock-admin
closed
1 year ago
2
xiaoming90 - Rely On Balancer Oracle Which Is Not Updated Frequently
#67
sherlock-admin
opened
1 year ago
4
xiaoming90 - Attackers Can DOS Balancer Vaults By Bypassing The BPT Threshold
#66
sherlock-admin
opened
1 year ago
4
xiaoming90 - `CrossCurrencyfCashVault` Cannot Be Upgraded
#65
sherlock-admin
opened
1 year ago
1
xiaoming90 - Corruptible Upgradability Pattern
#64
sherlock-admin
opened
1 year ago
2
xiaoming90 - `Transfer()` Is Used Instead If `Call()` To Transfer ETH
#63
sherlock-admin
closed
1 year ago
1
xiaoming90 - All Borrowed Assets Can Be Charged As Protocol Fees Due To Uncapped Fee
#62
sherlock-admin
closed
1 year ago
2
xiaoming90 - Initialization of Cross Currency Vault Can Be Front-runned
#61
sherlock-admin
closed
1 year ago
0
xiaoming90 - Approve Returned Value Not Validated
#60
sherlock-admin
closed
1 year ago
0
xiaoming90 - Did Not Approve To Zero First
#59
sherlock-admin
opened
1 year ago
2
xiaoming90 - Compromised Third-Party Protocols Can Pull All Assets From Balancer Vaults
#58
sherlock-admin
closed
1 year ago
0
xiaoming90 - Supported Features of 0x's Exchange Proxy Introduce Unnecessary Risks
#57
sherlock-admin
closed
1 year ago
0
xiaoming90 - All Reward Tokens Can Be Charged As Fee Due To Uncapped Fee
#56
sherlock-admin
closed
1 year ago
0
xiaoming90 - Users Can Enter Balancer Vault Within Settlement Period
#55
sherlock-admin
closed
1 year ago
2
xiaoming90 - Users Unable To Enter Vault After Emergency Settlement
#54
sherlock-admin
closed
1 year ago
0
xiaoming90 - Claim Rewards Can Fail Due To Transfer Failure
#53
sherlock-admin
closed
1 year ago
0
xiaoming90 - Unable To Recover Funds From Account
#52
sherlock-admin
closed
1 year ago
2
xiaoming90 - Oracles With Different Quote Currency Can Be Used To Compute Price
#51
sherlock-admin
closed
1 year ago
1
hyh - TwoTokenPoolUtils's _getOraclePairPrice produces incorrect oraclePairPrice when balancerOracleWeight is set to be bigger than BALANCER_ORACLE_WEIGHT_PRECISION
#50
sherlock-admin
opened
1 year ago
2
joestakey - `BaseStrategyVault.redeemFromNotional()` can fail if `receiver` has a fallback function
#49
sherlock-admin
closed
1 year ago
0
joestakey - Notional Governors can use `reduceMaxBorrowCapacity` on a vault to increase `maxBorrowCapacity`, which can grief users of the vault.
#48
sherlock-admin
closed
1 year ago
2
joestakey - Accounts cannot raise their collateral if vault is paused
#47
sherlock-admin
closed
1 year ago
0
Previous
Next