issues
search
sherlock-audit
/
2022-11-sense-judging
1
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
ak1 - The implementation allows for calling the startCooldown before calling the settle
#52
sherlock-admin
closed
1 year ago
2
ak1 - targetedRate can be zero value when startCooldown is called by exteranally
#51
sherlock-admin
closed
1 year ago
1
ak1 - Public vault : Initial depositor can manipulate the price per share value and future depositors are forced to deposit huge value in vault.
#50
sherlock-admin
opened
1 year ago
2
Aits - Return value is not used for ` RollerPeriphery.withdraw() `
#49
sherlock-admin
closed
1 year ago
0
cryptphi - Anyone can spend on behalf of roller periphery
#48
sherlock-admin
closed
1 year ago
3
cryptphi - Unchecked transfers
#47
sherlock-admin
closed
1 year ago
0
minhquanym - Possible DOS in RollerPeriphery `approve()` function
#46
sherlock-admin
opened
1 year ago
3
CRYP70 - Adversary Can Front-Run Swap Transactions To Receive Funds For Free
#45
sherlock-admin
closed
1 year ago
1
ignacio - ABI.ENCODEPACKED() SHOULD NOT BE USED WITH DYNAMIC TYPES WHEN PASSING THE RESULT TO A HASH FUNCTION SUCH AS KECCAK256() Use abi.encode() instead which will pad items to 32 bytes, which will prevent hash collisions
#44
sherlock-admin
closed
1 year ago
0
ignacio - USE OF SOLIDITY VERSION 0.8.13 WHICH HAS KNOWN ISSUES APPLICABLE TO SENSE
#43
sherlock-admin
closed
1 year ago
0
0xSmartContract - First `ERC4626` deposit exploit can break share calculation
#42
sherlock-admin
closed
1 year ago
4
ctf_sec - Using space.balanceOf(address(this)) and balancer Vault balance to calculate spot price makes AutoRoller.sol very vulnerable to price manipulation.
#41
sherlock-admin
closed
1 year ago
3
0xSmartContract - Missing ReEntrancy Guard to `claimRewards` function
#40
sherlock-admin
closed
1 year ago
7
0xSmartContract - Vulnerability related to ‘Optimizer Bug Regarding Memory Side Effects of Inline Assembly’
#39
sherlock-admin
opened
1 year ago
3
ctf_sec - Lack of support for token that is not 18 decimals.
#38
sherlock-admin
closed
1 year ago
0
ctf_sec - User can remove the adapter's stake token balance from the AutoRoller.sol by calling claimRewards
#37
sherlock-admin
closed
1 year ago
1
ctf_sec - Lack of slippage protection when doing balancer swap and exit pool in AutoRoller.sol / swap request deadline is hardcoded to type(uint256).max
#36
sherlock-admin
closed
1 year ago
0
ctf_sec - Cooldown period is hardcoded to 10 days.
#35
sherlock-admin
closed
1 year ago
1
ctf_sec - lastRoller cannot call settle if the AutoRoller contract does not have "stakeSize" amount of adapter's stake token
#34
sherlock-admin
closed
1 year ago
1
ctf_sec - AutoRoller.sol#roll can revert if lastSettle is zero because solmate ERC4626 deposit revert if previewDeposit returns 0
#33
sherlock-admin
opened
1 year ago
3
ctf_sec - A malicious early user/attacker can manipulate the share to take an unfair share of future users' deposits when maturity is not set.
#32
sherlock-admin
closed
1 year ago
6
koxuan - Two addresses token will cause double claim of stake when sponsor series runs settle()
#31
sherlock-admin
closed
1 year ago
0
ctf_sec - Math rounding in AutoRoller.sol is not ERC4626-complicant: previewWithdraw should round up.
#30
sherlock-admin
opened
1 year ago
5
ctf_sec - Hacker can call approve function to approve malicious contract to spend token in RollerPeriphery.sol
#29
sherlock-admin
closed
1 year ago
0
8olidity - Calling startCooldown() directly can bypass the msg.sender restriction in settle()
#28
sherlock-admin
closed
1 year ago
0
8olidity - use safetransfer()
#27
sherlock-admin
closed
1 year ago
0
8olidity - solmate does not check whether the token exists
#26
sherlock-admin
closed
1 year ago
1
8olidity - rollerPeriphery::approve() has no permission control and can steal contract tokens
#25
sherlock-admin
closed
1 year ago
0
supernova - Anybody can make RollupPeriphery approve unlimited amount of ERC20 tokens
#24
sherlock-admin
closed
1 year ago
0
koxuan - overflow caused by uint32(block.timestamp) breaks roll()
#23
sherlock-admin
closed
1 year ago
0
0x52 - AutoRoller#eject can be used to steal all the yield from vault's YTs
#22
sherlock-admin
opened
1 year ago
5
0x52 - RollerPeriphery#approve is public allowing anyone to approve themselves tokens
#21
sherlock-admin
closed
1 year ago
0
0x52 - Adversary can brick AutoRoller by creating another AutoRoller on the same adapter
#20
sherlock-admin
opened
1 year ago
3
0x52 - Hardcoded divider address in RollerUtils is incorrect and will brick autoroller
#19
sherlock-admin
opened
1 year ago
3
supernova - Lack of codesize check
#18
sherlock-admin
closed
1 year ago
0
koxuan - setParam() cooldown can cause loss of fund to liquidity providers
#17
sherlock-admin
closed
1 year ago
0
koxuan - creating an AutoRoller will fail when using an adapter that uses a erc20 token with more than 18 decimals as target
#16
sherlock-admin
closed
1 year ago
1
pashov - Solmate's ERC4626 implementation does not work correctly with fee-on-transfer `asset` tokens
#15
sherlock-admin
closed
1 year ago
1
pashov - Anyone can steal leftover/mistakenly sent tokens in `RollerPeriphery`
#14
sherlock-admin
closed
1 year ago
0
pashov - Multiple address tokens can be withdrawn to `rewardRecipient` even they are the `asset` of the vault
#13
sherlock-admin
closed
1 year ago
0
pashov - Some tokens (`USDT`) expect to always have zero allowances before approving a non-uint256.max amount
#12
sherlock-admin
closed
1 year ago
3
pashov - MEV on all `Balancer` actions - `join`, `exit`, `swap` are not slippage protected and can be sandwich attacked
#11
sherlock-admin
closed
1 year ago
0
pashov - Code does not handle ERC20 tokens with special `transfer` implementation
#10
sherlock-admin
opened
1 year ago
3
cccz - onSponsorWindowOpened needs to require stake != asset
#9
sherlock-admin
closed
1 year ago
1
YieldProtocol - DoS by sponsoring the next series
#8
sherlock-admin
closed
1 year ago
1
yixxas - Wrong logic in `roll()`
#7
sherlock-admin
closed
1 year ago
0
0xmuxyz - `safeApprove()` function deprecated is used in multiple lines
#6
sherlock-admin
closed
1 year ago
0
0xmuxyz - Lack of access control modifier on `mint()` function in the RollerPeriphery.sol
#5
sherlock-admin
closed
1 year ago
0
csanuragjain - User has to pay twice
#4
sherlock-admin
closed
1 year ago
0
csanuragjain - Zero approval missing
#3
sherlock-admin
closed
1 year ago
0
Next