issues
search
sherlock-audit
/
2022-11-nounsdao-judging
4
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
0xZakk - Only way to retrieve over sent funds is to cancel the stream
#29
sherlock-admin
closed
1 year ago
0
obront - Payer cannot withdraw accidental extra funds sent to the contract without canceling
#28
sherlock-admin
opened
1 year ago
2
pzeus - Unnecessary check
#27
sherlock-admin
closed
1 year ago
0
pzeus - Reentrancy exploit
#26
sherlock-admin
closed
1 year ago
0
pzeus - Sanity checks
#25
sherlock-admin
closed
1 year ago
0
pzeus - Potential reentrancy attack
#24
sherlock-admin
closed
1 year ago
0
ctf_sec - Does not check if the Stream.sol#payment token matches the payer#payment token.
#23
sherlock-admin
closed
1 year ago
1
ctf_sec - Payer is not enforced to pay the recipient
#22
sherlock-admin
closed
1 year ago
1
ctf_sec - Payer in Stream.sol is not capable of calling the Stream#cancel, Stream#withdraw and Stream#resuceERC20
#21
sherlock-admin
closed
1 year ago
1
ctf_sec - Any payment token can be used when calling StreamFactory.sol#createStream
#20
sherlock-admin
closed
1 year ago
4
neumo - Overflow can make ratePerSecond zero and prevent recipient from withdrawing for the entire duration of the stream
#19
sherlock-admin
closed
1 year ago
6
neko_nyaa - `rescueERC20()` does not rescue stream tokens, however it is easily possible to support such functionality.
#18
sherlock-admin
closed
1 year ago
0
rvierdiiev - Stream.rescueERC20 allows to transfer token() in case of 2 address tokens
#17
sherlock-admin
closed
1 year ago
0
rvierdiiev - StreamFactory.createStream with predictedStreamAddress always uses nonce == 0
#16
sherlock-admin
closed
1 year ago
3
HollaDieWaldfee - Stream.sol: cancel function should prevent future token streaming to recipient when balance is insufficient to pay recipient
#15
sherlock-admin
closed
1 year ago
0
rvierdiiev - Stream doesn't have ability to rescue native token
#14
sherlock-admin
closed
1 year ago
4
rvierdiiev - Stream.balanceOf for payer doesn't consider extra tokens sent to contract
#13
sherlock-admin
closed
1 year ago
0
rvierdiiev - Possible to create Stream with start and stop time in past
#12
sherlock-admin
closed
1 year ago
0
rvierdiiev - Not possible to update stream params, need to deploy new stream in case when bigger amount is needed
#11
sherlock-admin
closed
1 year ago
0
HollaDieWaldfee - IStream.sol: Missing function to calculate amount to withdraw
#10
sherlock-admin
closed
1 year ago
0
HollaDieWaldfee - Stream.sol: balanceOf function returns nonsensical result for payer
#9
sherlock-admin
closed
1 year ago
0
dic0de - Payment Token accidentally sent to the contract would be temporarily locked
#8
sherlock-admin
closed
1 year ago
0
dic0de - A stream can be initialized more than once
#7
sherlock-admin
closed
1 year ago
0
HollaDieWaldfee - StreamFactory.sol: Fee-on-transfer tokens not supported in "createAndFundStream" function
#6
sherlock-admin
closed
1 year ago
0
rvierdiiev - Not possible to create stream that pays less than 1 token per second
#5
sherlock-admin
closed
1 year ago
2
csanuragjain - Expired streams can be added
#4
sherlock-admin
closed
1 year ago
0
csanuragjain - Recipient can lose funds
#3
sherlock-admin
closed
1 year ago
1
bin2chen - rescueERC20() restriction problem
#2
sherlock-admin
closed
1 year ago
0
bin2chen - cancel() maybe can't execute
#1
sherlock-admin
closed
1 year ago
0
Previous