sherlock-audit 2023-12-dodo-judging issues

sherlock-audit / 2023-12-dodo-judging

5 stars 4 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

pontifex - The pool does not receive swapFee for swap transactions

#43 sherlock-admin closed 8 months ago
0
Irissme - Lack of Security Check Before Initiating Liquidation

#42 sherlock-admin2 closed 8 months ago
1
alexzoid - Inability to Re-add `oldToken` After Execution of `D3MakerFreeSlot.setNewTokenAndReplace()`

#41 sherlock-admin opened 8 months ago
5
pontifex - Users pay less fees using buyToken than using sellToken

#40 sherlock-admin2 closed 8 months ago
17
Irissme - Lack of Security Check in D3Funding Contract

#39 sherlock-admin closed 8 months ago
2
Irissme - Lack of Security Check before Borrowing in D3Funding Contract

#38 sherlock-admin2 closed 8 months ago
2
Irissme - Lack of Safety Check in Maker Deposit Function

#37 sherlock-admin closed 8 months ago
1
bareli - No Zero Address Check:

#36 sherlock-admin2 closed 8 months ago
1
0xepley - DOS in `tokenList` array

#35 sherlock-admin closed 8 months ago
2
bareli - function defination of _GeneralIntegrate

#34 sherlock-admin2 closed 8 months ago
2
CL001 - The checkBorrowSafe method is not set properly

#33 sherlock-admin closed 8 months ago
2
bareli - Division by Zero:

#32 sherlock-admin2 closed 8 months ago
2
bareli - Input Validation

#31 sherlock-admin closed 8 months ago
1
bareli - Centralization Risks:

#30 sherlock-admin2 closed 8 months ago
1
0xepley - No check on the return value of `create`

#29 sherlock-admin closed 8 months ago
2
bareli - Looping Through Tokens

#28 sherlock-admin2 closed 8 months ago
2
bareli - access control:: init function

#27 sherlock-admin closed 8 months ago
1
bareli - Input Validation

#26 sherlock-admin2 closed 8 months ago
1
0xepley - D3Oracle will return the wrong price if the Chainlink aggregator returns price outside min/max range

#25 sherlock-admin closed 8 months ago
2
bareli - Gas Limitations:

#24 sherlock-admin2 closed 8 months ago
2
ZanyBonzy - D3Oracle will use the wrong price if the Chainlink returns price outside normal range

#23 sherlock-admin closed 8 months ago
1
404Notfound - An old token could not be reused in `D3MakerFreeSlot`

#22 sherlock-admin2 closed 8 months ago
0
alexbabits - Double spend if the router uses pull technique for collecting `fromToken`

#21 sherlock-admin closed 8 months ago
1
dirk_y - Malicious user can block LPs from providing liquidity to vaults

#20 sherlock-admin2 closed 8 months ago
4
dirk_y - Replacing an old token can overwrite the price of an unintended active token

#19 sherlock-admin closed 8 months ago
0
0xhashiman - Missing Slippage Protection in some Functions

#18 sherlock-admin2 closed 8 months ago
1
0xhashiman - Unsafe Usage Of delegatecall in D3Proxy

#17 sherlock-admin closed 8 months ago
2
shubhzDev - Cumulative Records of tokens(tokenCumMap) are not updated correctly upon buying and selling tokens.

#16 sherlock-admin2 closed 8 months ago
1
IvanFitro - D3Proxy.sol :: buyTokens() If a user sends an excess amount of ETH to purchase tokens, another user can misappropriate the surplus.

#15 sherlock-admin closed 8 months ago
2
Krace - Wrong calculation of `_recordSwap`'s `toAmount` when selling or buying tokens

#14 sherlock-admin2 closed 8 months ago
1
Krace - Users don't need to pay for swapFee when selling or buying tokens

#13 sherlock-admin closed 8 months ago
10
Zims - External function with an unbounded loop could lead to a DoS attack

#12 sherlock-admin2 closed 8 months ago
2
osmanozdemir1 - `D3UserQuota::getTierQuota` is not working as expected

#11 sherlock-admin closed 8 months ago
2
osmanozdemir1 - `payFromAmount` is calculated with incorrect fee amount

#10 sherlock-admin2 closed 8 months ago
19
osmanozdemir1 - Swap fees are not charged in `D3Trading::sellToken()`

#9 sherlock-admin closed 8 months ago
1
bigbick123456789000 - Precision Loss Risk in parseDec18Amount Function

#8 sherlock-admin2 closed 8 months ago
1
bigbick123456789000 - Potential Token Transfer Vulnerability due to Insufficient Ownership Validation

#7 sherlock-admin closed 8 months ago
1
bigbick123456789000 - Risk of Overpayment Due to Inaccurate Debt Repayment Calculation in `_poolRepayAll` Function

#6 sherlock-admin2 closed 8 months ago
2
bigbick123456789000 - Precision Loss Risk in liquidate Function

#5 sherlock-admin closed 8 months ago
1
bigbick123456789000 - Missing Interest Update Before `liquidateByDODO` Operations

#4 sherlock-admin2 closed 8 months ago
2
bigbick123456789000 - Lack of Effective Deadline Check in Token Swap Functions

#3 sherlock-admin closed 8 months ago
1
eeshenggoh - Division Before Multiplication

#2 sherlock-admin2 closed 8 months ago
1
FaisalAli - [N-01] The `nonReentrant` `modifier` should occur before all other modifiers

#1 sherlock-admin closed 8 months ago
1