issues
search
sherlock-audit
/
2023-07-perennial-judging
2
stars
1
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
okolicodes - Failure to Limit the value of assets a single liquidation can seize
#132
sherlock-admin
closed
1 year ago
1
tives - No validation of the Vault address in invoke
#131
sherlock-admin
closed
1 year ago
1
n33k - Market: User can frontrun oracle version update to settle position at a determined price
#130
sherlock-admin
closed
1 year ago
2
n33k - PythOracle: Keeper can commit selected favourable price from 3-second range prices
#129
sherlock-admin
closed
1 year ago
1
ast3ros - Users are paying twice the fee even if the two transactions belong to the same version
#128
sherlock-admin
closed
1 year ago
1
ast3ros - Result from Chainlink oracle price is not checked for validity
#127
sherlock-admin
closed
1 year ago
1
okolicodes - Not checking for stale prices
#126
sherlock-admin
closed
1 year ago
1
tives - Vault doesn't round shares up on withdraw
#125
sherlock-admin
closed
1 year ago
1
cryptphi - internal _update() in Market.update() does not return updated context.
#124
sherlock-admin
closed
1 year ago
1
bin2chen - keep() may not be able to execute
#123
sherlock-admin
closed
1 year ago
3
n33k - Kept.sol: Keeper could be rewarded with wrong amount of token because of stale eth price
#122
sherlock-admin
closed
1 year ago
1
bin2chen - update() wrong privilege control
#121
sherlock-admin
opened
1 year ago
3
MatricksDeCoder - Lack of validity and sanity checks while consuming Chainlink Oracle data
#120
sherlock-admin
closed
1 year ago
1
bin2chen - fund() fee token be locked
#119
sherlock-admin
closed
1 year ago
1
tvdung94 - Liquidators might mistakenly transfer additional fund to users when liquidating
#118
sherlock-admin
closed
1 year ago
1
MatricksDeCoder - Missing checks for whether L2 sequences is active
#117
sherlock-admin
closed
1 year ago
1
MatricksDeCoder - Missing checks for whether L2 sequences is active
#116
sherlock-admin
closed
1 year ago
1
tvdung94 - Multi invoker does not allow users to liquidate a position without liquidation fee
#115
sherlock-admin
closed
1 year ago
1
ck - Out of Gas error will occur if too many markets are registered to a vault
#114
sherlock-admin
closed
1 year ago
1
ck - Settling and Updating Vault will fail if one market breaks
#113
sherlock-admin
closed
1 year ago
1
KingNFT - ````Market```` can't get valid price while oracle's ````granularity > 1````
#112
sherlock-admin
closed
1 year ago
1
brianspha - Malicious Oracle Provider can drain all rewards
#111
sherlock-admin
closed
1 year ago
1
okolicodes - Missing Sequencer Uptime Feed check can cause unfair liquidations on Arbitrum
#110
sherlock-admin
closed
1 year ago
1
okolicodes - Chainlink Oracle will return the wrong price if the Chainlink aggregator returns price outside min/max range
#109
sherlock-admin
closed
1 year ago
1
feelereth - owner can repeatedly call the update() function to waste gas
#108
sherlock-admin
closed
1 year ago
1
feelereth - the at() function can be exploited to cause an out-of-gas error
#107
sherlock-admin
closed
1 year ago
1
feelereth - the _latestStale() check is vulnerable to timestamp manipulation by miners
#106
sherlock-admin
closed
1 year ago
1
Emmanuel - Markets cannot use USDC as underlying token
#105
sherlock-admin
closed
1 year ago
2
panprog - It is possible to open and liquidate your own position in 1 transaction to overcome efficiency and liquidity removal limits at almost no cost
#104
sherlock-admin
opened
1 year ago
4
feelereth - integer underflow vulnerability due to the use of uint96 for storing timestamps.
#103
sherlock-admin
closed
1 year ago
1
feelereth - The use of a global latestNonce variable to generate order IDs is vulnerable to front-running attacks.
#102
sherlock-admin
closed
1 year ago
1
feelereth - _executeOrder function is vulnerable to frontrunning attacks
#101
sherlock-admin
closed
1 year ago
1
hassan-truscova - Rounding issue in convertToAssets
#100
sherlock-admin
closed
1 year ago
1
lanrebayode77 - Uncapped MaxClaim Increament
#99
sherlock-admin
closed
1 year ago
1
hassan-truscova - Rounding Issues In convertToShares function
#98
sherlock-admin
closed
1 year ago
1
KingNFT - ````keeperFee```` may be Insufficient due to implicit assumption of ````DSU```` price
#97
sherlock-admin
closed
1 year ago
1
KingNFT - Increasing of ````pyth.getUpdateFee()```` may cause keepers refusing to work
#96
sherlock-admin
closed
1 year ago
1
feelereth - Code can lock funds by approving the batcher and reserve without a way to revoke approval
#95
sherlock-admin
closed
1 year ago
1
n33k - Market: DoS when stuffed with pending protected positions
#94
sherlock-admin
opened
1 year ago
14
feelereth - Order placement in MultiInvoker is vulnerable to miner frontrunning
#93
sherlock-admin
closed
1 year ago
1
feelereth - _retarget function in the Vault contract is vulnerable to price manipulation from the oracles of the registered markets
#92
sherlock-admin
closed
1 year ago
1
KingNFT - Keepers will suffer significant losses due to miss compensation for L1 rollup fees
#91
sherlock-admin
opened
1 year ago
26
feelereth - Updating market parameters like leverage could instantly liquidate positions
#90
sherlock-admin
closed
1 year ago
1
feelereth - frontrunning vulnerability in the code between calling update() and _update().
#89
sherlock-admin
closed
1 year ago
1
feelereth - The liquidation fee calculation is vulnerable to manipulation by the token contract reporting false balances
#88
sherlock-admin
closed
1 year ago
1
feelereth - the collateral checkpointing logic is vulnerable to miner/validator manipulation
#87
sherlock-admin
closed
1 year ago
1
feelereth - collateralAfterFees does not subtract the fees for the current position
#86
sherlock-admin
closed
1 year ago
1
feelereth - updateBeneficiary function allows the owner to divert funds by changing where fees and donations are sent
#85
sherlock-admin
closed
1 year ago
1
feelereth - A malicious miner could manipulate prices to liquidate positions inappropriately
#84
sherlock-admin
closed
1 year ago
1
cartlex - COORDINATOR CAN'T UPDATE RISK PARAMETERS AFTER updateCoordinator() FUNCTION USED BY OWNER.
#83
sherlock-admin
closed
1 year ago
1
Previous
Next