issues
search
sherlock-audit
/
2023-11-covalent-judging
3
stars
2
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
caventa - New exchange rate miscalculation arising from updated commission rates
#75
sherlock-admin2
closed
7 months ago
2
cergyk - OperationalStaking::rewardValidators Rewards distribution can be sandwiched to extract most of the rewards from honest validators
#74
sherlock-admin
closed
7 months ago
2
caventa - Unfair early advantage in specimenHash selection logic
#73
sherlock-admin2
closed
7 months ago
2
Mylifechangefast_eth - Gas Consumption in Specimen Finalization Process
#72
sherlock-admin
closed
7 months ago
3
qmdddd - The function `setValidatorAddress` will cause the total amount of the validator's stake to exceed `validatorMaxStake`, thereby violating the protocol.
#71
sherlock-admin2
closed
7 months ago
1
dgnnn - Missing Storage Gap and _disableInitializers
#70
sherlock-admin
closed
7 months ago
2
Mylifechangefast_eth - Msg.sender can still send multiple submission even though there is a check: require(specimenHashParticipants[k] != msg.sender, "Operator already submitted for the provided block hash") with same specimen
#69
sherlock-admin2
closed
7 months ago
2
irresponsible - Validator and delagators can bypass the unstaking cool down period
#68
sherlock-admin
closed
7 months ago
20
PUSH0 - No option to change validator address without also transferring unstakings, leads to lost rewards when a validator has taken more than 300 unstakings (even if through normal usage)
#67
sherlock-admin2
closed
7 months ago
1
PUSH0 - `validatorMaxStake` can be bypassed by using `setValidatorAddress()`
#66
sherlock-admin
opened
7 months ago
5
thank_you - OperationalStaking.stake() has no slippage checks
#65
sherlock-admin2
closed
7 months ago
2
thank_you - Unstakings are never deleted leading to addValidatorAddress DOSing permanently
#64
sherlock-admin
closed
7 months ago
1
cergyk - BlockSpecimenProofChain::submitBlockSpecimenProof Block specimen producers may submit the same specimen multiple times and force quorum
#63
sherlock-admin2
closed
7 months ago
2
Mafia - Function getBSPRoleData always return requiredStake with zero value
#62
sherlock-admin
closed
7 months ago
0
Mylifechangefast_eth - DOS attack will occur because no restriction of unlimited submissions of block specimen proof causing others to be able submit anymore
#61
sherlock-admin2
closed
7 months ago
2
Mylifechangefast_eth - Race condition will occur when submitting block specimen proof
#60
sherlock-admin
closed
7 months ago
2
SadBase - Risk of Validator Address Change Failure Due to Unbounded Growth of Unstaking Array
#59
sherlock-admin2
closed
7 months ago
1
SadBase - Incomplete Implementation of `renounceOwnership` Function Prevents Owner from Renouncing Ownership
#58
sherlock-admin
closed
7 months ago
3
krkba - Possible Integer Over Flow in `_secondsPerBlock`
#57
sherlock-admin2
closed
7 months ago
2
krkba - Missing free session space. Though it should.
#56
sherlock-admin
closed
7 months ago
3
cergyk - BlockSpecimenProofChain::finalizeSpecimenSession strict inequality yields wrong quorum ratio
#55
sherlock-admin2
closed
6 months ago
16
petro1912 - A delegator can receive the rewards immediately by calling `stake` or `redelegateUnstake` to corresponding delegator when `RewardFailedDueLowPool` event emitted.
#54
sherlock-admin
closed
7 months ago
2
cawfree - Panic: Validators with IDs over `255` will prevent quorum blocks from finalizing.
#53
sherlock-admin2
closed
7 months ago
1
PUSH0 - No cooldown in `recoverUnstaking()`, opens up several possible attacks by abusing this functionality.
#52
sherlock-admin
opened
7 months ago
6
PUSH0 - Wrong access control on setValidatorCommissionRate()
#51
sherlock-admin2
closed
7 months ago
1
PUSH0 - Frontrunning validator freeze to withdraw tokens
#50
sherlock-admin
opened
7 months ago
20
tpiliposian - Incorrect Handling of ExchangeRate
#49
sherlock-admin2
closed
6 months ago
5
nobody2018 - _finalizeWithParticipants may revert due to underflow
#48
sherlock-admin
closed
7 months ago
2
PUSH0 - New staking between reward epochs will dilute rewards for existing stakers. Anyone can then front-run `OperationalStaking.rewardValidators()` to steal rewards
#47
sherlock-admin2
opened
7 months ago
7
nobody2018 - setValidatorAddress may never be successfully executed in some cases
#46
sherlock-admin
closed
7 months ago
2
nobody2018 - setValidatorCommissionRate should be called by staking manager
#45
sherlock-admin2
closed
7 months ago
1
Mafia - User cannot unstake when validator is frozen
#44
sherlock-admin
closed
7 months ago
3
Mylifechangefast_eth - All address can be removed and not the active ones
#43
sherlock-admin2
closed
7 months ago
3
SadBase - Discrepancy in Access Control Between Documentation and Implementation in `setValidatorCommissionRate` Function
#42
sherlock-admin
closed
7 months ago
1
aslanbek - Validators are incentivized to keep their validatorStake low to get more rewards
#41
sherlock-admin2
closed
6 months ago
5
boredpukar - Reward Validators Function Incorrectly Assumes the Existence of Valid Validators
#40
sherlock-admin
closed
7 months ago
3
aslanbek - OperationalStaking may not possess enough CQT for the last withdrawal
#39
sherlock-admin2
opened
7 months ago
7
petro1912 - `setValidatorAddress` function doesn't take the `delegated` value into account when setting a new validator address as an delegator address
#38
sherlock-admin
closed
6 months ago
14
eta - Centralization risk for owner accounts
#37
sherlock-admin2
closed
7 months ago
3
themis210 - without checking _minSubmissionRequired, there can be Division error in BlockSpecimenProofChain::finalizeSpecimenSession
#36
sherlock-admin
closed
7 months ago
3
petro1912 - The `getDelegatorTotalLocked` function does not return the correct value, but only returns the value for one validator.
#35
sherlock-admin2
closed
7 months ago
1
cawfree - Frontrunning: Staking to a `Validator` immediately prior to call to `rewardValidators` allows an attacker to siphon rewards.
#34
sherlock-admin
closed
7 months ago
1
ravikiran.web3 - BlockSpecimenProofChain: incorrect deletion of BlockSpecimenProofChain
#33
sherlock-admin2
closed
7 months ago
2
ravikiran.web3 - BlockSpecimenProofChain::finalizeSpecimenSession() is buggy, can result in BlockspecimenSession never getting finalized
#32
sherlock-admin
closed
7 months ago
3
ravikiran.web3 - BlockSpecimenProofChain::addBSPOperator() should add operator to only enabled validators, should revert for disabled validators
#31
sherlock-admin2
closed
7 months ago
3
ravikiran.web3 - BlockSpecimenProofChain::setMinSubmissionsRequired() accepts any number as min submissions to reach quorum
#30
sherlock-admin
closed
7 months ago
2
p-tsanev - BlockSpecimenProofChain.sol#submitBlockSpecimenProof() - arbitrary ``storageURL`` can contain malicious string data
#29
sherlock-admin2
closed
7 months ago
2
yujin718 - Unstaking limit issue
#28
sherlock-admin
closed
7 months ago
1
yujin718 - When unstaking, length of unstaking increasing. It may cause overflow
#27
sherlock-admin2
closed
7 months ago
2
alexbabits - If user unstakes before claiming rewards, rewards are permanently lost
#26
sherlock-admin
closed
7 months ago
1
Previous
Next