issues
search
sherlock-audit
/
2022-11-dodo-judging
0
stars
2
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Mukund - MODIFIER `judgeExpired` CAN BE BYPASSED
#95
github-actions[bot]
closed
1 year ago
0
koxuan - ERC777 tokens can do advantageous swaps by reentering swap functions
#94
github-actions[bot]
closed
1 year ago
0
minhquanym - Wrong `routeFeeRate` value, users have to pay more fee
#93
github-actions[bot]
closed
1 year ago
1
w42d3n - Fee on transfer tokens do not work within the protocol
#92
github-actions[bot]
closed
1 year ago
0
Mukund - MODIFIER `judgeExpired` CAN BE BYPASSED
#91
github-actions[bot]
closed
1 year ago
0
ElKu - Usage of deprecated transfer() can result in revert
#90
github-actions[bot]
closed
1 year ago
0
ElKu - `superWithdraw` function cannot withdraw any normal ERC-20 tokens, which doesnt implement `universal` functions
#89
github-actions[bot]
closed
1 year ago
0
Chom - dodoMutliSwap is not check whether splitNumber is sorted ASC and starts with 0 or not
#88
github-actions[bot]
closed
1 year ago
0
defsec - Incompatibility With Rebasing/Deflationary/Inflationary tokens
#87
github-actions[bot]
closed
1 year ago
1
defsec - Check return value of sellQuote and sellBase
#86
github-actions[bot]
closed
1 year ago
1
defsec - Use of .transfer()
#85
github-actions[bot]
closed
1 year ago
0
ak1 - Lack of `reentrancy` guard for swap operation
#84
github-actions[bot]
closed
1 year ago
0
virtualfact - send and transfer do not protect from reentrancies in case of gas price changes
#83
github-actions[bot]
closed
1 year ago
0
ak1 - Possible `DOS` inside the `mixSwap` and `_multiSwap` when for loop iteration goes long
#82
github-actions[bot]
closed
1 year ago
0
ElKu - `externalSwap` function doesnt check if enough eth is sent by the user. Malicious user can withdraw eth stuck in the contract.
#81
github-actions[bot]
closed
1 year ago
0
ak1 - DODORouteProxy.sol : The `receiveAmount` from all the swap is not the actual value. It is deducted from all the fee.
#80
github-actions[bot]
closed
1 year ago
5
ak1 - DODORouteProxy.sol#L475 : when broker address is not set, fee amount will be lost.
#79
github-actions[bot]
closed
1 year ago
0
hansfriese - Users and brokers can use the protocol without paying fees
#78
github-actions[bot]
closed
1 year ago
1
ak1 - DODORouteProxy.sol#L170: Lack of slippage protection for `externalSwap`
#77
github-actions[bot]
closed
1 year ago
6
ak1 - Use of `transfer` function to send fund may not work and fund can stuck.
#76
github-actions[bot]
closed
1 year ago
0
ak1 - DODOApproveProxy.sol : "function init" can be called by anyone and can take the ownership
#75
github-actions[bot]
closed
1 year ago
0
ak1 - DODOApprove.sol : "function init" can be called anyone and takeover the ownership
#74
github-actions[bot]
closed
1 year ago
0
virtualfact - Literals with many digits is recommanded using Ether suffix
#73
github-actions[bot]
closed
1 year ago
0
__141345__ - Infinite approve potentially lead to leftover fund loss
#72
github-actions[bot]
closed
1 year ago
0
__141345__ - `externalSwap()` miss `msg.value` check
#71
github-actions[bot]
closed
1 year ago
0
__141345__ - check bytes data length before abi.decode
#70
github-actions[bot]
closed
1 year ago
0
__141345__ - Mistakenly sent eth could be lost
#69
github-actions[bot]
closed
1 year ago
0
__141345__ - `externalSwap()` need slippage control
#68
github-actions[bot]
closed
1 year ago
0
Tomo - [Tomo-H1] Can withdraw all funds in the DODORouteProxy contract
#67
github-actions[bot]
closed
1 year ago
6
Tomo - [Tomo-M5] Transfer zero amount can be reverted
#66
github-actions[bot]
closed
1 year ago
0
Tomo - [Tomo-M4] Possible lost msg.value
#65
github-actions[bot]
closed
1 year ago
0
Tomo - [Tomo-M3] Approve max has risk
#64
github-actions[bot]
closed
1 year ago
0
Tomo - [Tomo-M2] Use safe version ERC20 transfer
#63
github-actions[bot]
closed
1 year ago
0
Tomo - [Tomo-M1] Use call instead of transfer when sending ETH
#62
github-actions[bot]
closed
1 year ago
0
cccz - externalSwap should refund excess fromToken
#61
github-actions[bot]
closed
1 year ago
1
Chandr - DODOApprove.claimTokens() SHOULD CHECK IF THE CALLEE IS A CONTRACT
#60
github-actions[bot]
closed
1 year ago
0
simon135 - since `feeData` is user supplied an attacker can make `brokerFee=0` and pay no fees
#59
github-actions[bot]
closed
1 year ago
1
0xNazgul - [NAZ-M2] Usage of deprecated `transfer()` can result in revert.
#58
github-actions[bot]
closed
1 year ago
0
0xNazgul - [NAZ-M1] External Calls Inside Unbounded Loops That May Address DoS
#57
github-actions[bot]
closed
1 year ago
0
simon135 - when `direction=1` the direction on pools could be wrong
#56
github-actions[bot]
closed
1 year ago
1
simon135 - calldata is not validated meaning an attacker can call arbitrary calldata to make reentrancy or steal funds
#55
github-actions[bot]
closed
1 year ago
1
yixxas - routeFeeRate being set to 0 can break the protocol for certain tokens
#54
github-actions[bot]
closed
1 year ago
4
0x52 - DODORouteProxy#externalSwap fails to return unused from tokens
#53
github-actions[bot]
closed
1 year ago
1
validDao - Not necessary to write boolean equality
#52
github-actions[bot]
closed
1 year ago
0
Nyx - Centralisation Risk
#51
github-actions[bot]
closed
1 year ago
0
pashov - Anyone can steal `DODORouteProxy.sol` contract's ETH balance
#50
github-actions[bot]
closed
1 year ago
0
pashov - Owner can set `routeFeeRate` to 99.99%
#49
github-actions[bot]
closed
1 year ago
0
pashov - Use `call()` with value instead of `transfer()` on `address payable`
#48
github-actions[bot]
closed
1 year ago
0
Nyx - Use safeTransferFrom() instead of transferFrom().
#47
github-actions[bot]
opened
1 year ago
3
Nyx - Usage of transfer() may revert.
#46
github-actions[bot]
closed
1 year ago
0
Next