sherlock-audit 2024-02-jala-swap-judging issues

sherlock-audit / 2024-02-jala-swap-judging

6 stars 4 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Afriaudit - User could potentially manipulate market price

#259 sherlock-admin2 closed 4 months ago
1
sa9933 - removeLiquiditywithPermit() can be greifed

#258 sherlock-admin closed 4 months ago
0
SK - Price Manipulation by Adding Liquidity

#257 sherlock-admin2 closed 4 months ago
1
Afriaudit - Lack of access control in `JalaRouter02: addliquidity` function

#256 sherlock-admin closed 4 months ago
1
giraffe - Precision loss in multiple areas of MasterRouter

#255 sherlock-admin2 closed 4 months ago
1
thisvishalsingh - thisvishalsingh - Manipulation of `setFlashFee` in `JalaFactory.sol`

#254 sherlock-admin closed 4 months ago
0
recursiveEth - Inconsistent Parameter Passing in Token Swapping Functions

#253 sherlock-admin2 closed 4 months ago
0
thisvishalsingh - thisvishalsingh - High level access functions can create points of failure

#252 sherlock-admin closed 4 months ago
1
Myrault - Contract ChilizWrapperFactory.sol cannot be compiled

#251 sherlock-admin2 closed 4 months ago
1
Lucyan99 - NC-3: Unused Ownership

#250 sherlock-admin closed 4 months ago
0
gkrastenovaudit - Users lose the receiving of remaining tokens

#249 sherlock-admin2 closed 4 months ago
1
kolos3 - The function burn is external wich everyone can call.

#248 sherlock-admin closed 4 months ago
0
recursiveEth - Missing Implementation of Permit Function in Contract

#247 sherlock-admin2 closed 4 months ago
0
cheatcode - Price Manipulation Due to Initial Liquidity Addition with Zero Reserves

#246 sherlock-admin closed 4 months ago
1
thisvishalsingh - thisvishalsingh - Permit front-running in `JalaRouter02.sol`

#245 sherlock-admin2 closed 4 months ago
0
Lucyan99 - NC-2: Functions not used internally could be marked external

#244 sherlock-admin closed 4 months ago
1
recursiveEth - Loss of Funds Due to Inappropriate Handling of Fee Address in Flash Loan Function

#243 sherlock-admin2 closed 4 months ago
0
0xAadi - Precision Loss Due to Division Before Multiplication

#242 sherlock-admin closed 4 months ago
1
cheatcode - Users are Unduly Penalized with High Gas Costs for Transactions that Fail due to variable conditions

#241 sherlock-admin2 closed 4 months ago
1
kolos3 - No zero address validation

#240 sherlock-admin closed 4 months ago
1
smbv-1919 - A malicious user can grief and DOS a user while he is trying to remove Liquidity

#239 sherlock-admin2 closed 4 months ago
0
cheatcode - Incorrect Swap Executions Due to Misalignment between `amounts` and `path`

#238 sherlock-admin closed 4 months ago
1
Lucyan99 - NC-1: Missing checks for `address(0)` when assigning values to address state variables

#237 sherlock-admin2 closed 4 months ago
1
cheatcode - Inaccurate Handling of Fee-on-Transfer Token Swaps Due to Slippage Tolerance Mismatch

#236 sherlock-admin closed 4 months ago
1
33audits - Precision loss when calculation tokenOffset

#235 sherlock-admin2 closed 4 months ago
0
cryptonoob - ChilizWrappedERC20::initialize function doesnt allow tokens with 18 decimals

#234 sherlock-admin closed 4 months ago
0
cryptonoob - Broken access control on JalaPair::skim allows attackers to transfers users tokens to himself

#233 sherlock-admin2 closed 4 months ago
0
cryptonoob - Broken access control on JalaPair::burn allows attackers to steal other users tokens

#232 sherlock-admin closed 4 months ago
0
cheatcode - Precision Loss and Incorrect Handling of Unwrappable Amounts in _unwrapAndTransfer function

#231 sherlock-admin2 closed 4 months ago
0
0x996 - In the `ChilizWrappedERC20::withdrawTo` function, if the transfer fails, it will result in the tokens being incorrectly burnt first.

#230 sherlock-admin closed 4 months ago
1
33audits - Loss of precission when unwrapping small amounts of tokens

#229 sherlock-admin2 closed 4 months ago
0
0xAadi - Potential Liquidity Depletion in `Swap` Function Due to AmountOut Exceeding Liquidity Reserves and Resulting Solvency Risks

#228 sherlock-admin closed 4 months ago
3
goluu - Deadshare is cause of Loss of User Funds

#227 sherlock-admin2 closed 4 months ago
1
0xAadi - Potential Liquidity Depletion in `Swap` Function Due to AmountOut Exceeding Liquidity Reserves and Resulting Solvency Risks

#226 sherlock-admin closed 4 months ago
0
0xRstStn - Some Tokens (e.g. USDT) will revert on IERC20 ```approve```

#225 sherlock-admin2 closed 4 months ago
0
mahmud - Less Amount of Wrapped token is sent to the `JalaRouter02` than should be when calling `swapExactTokensForETH` in the `JalaMasterRouter`.

#224 sherlock-admin closed 4 months ago
0
goluu - Attack Due To Rounding Error

#223 sherlock-admin2 closed 4 months ago
0
jasonxiale - issues related to Fan token paused.

#222 sherlock-admin closed 4 months ago
1
0x996 - If the withdrawal account is not the caller itself, the `ChilizWrappedERC20::withdrawTo` function will encounter issues with incorrect token amount transfer.

#221 sherlock-admin2 closed 4 months ago
1
mahmud - DOS in JalaPair contract in critical functions like `mint`, `burn` and `swap` due to overflow.

#220 sherlock-admin closed 4 months ago
0
mahmud - DOS in JalaPair contract in critical functions like mint, burn and swap due to overflow.

#219 sherlock-admin2 closed 4 months ago
0
0x77 - Missing constructor making contract as an abstract

#218 sherlock-admin closed 4 months ago
0
KupiaSec - After the current reserves are updated, kLast is also updated. As a result, the _mintFee function in JalaPair is unable to mint fee tokens.

#217 sherlock-admin2 closed 4 months ago
0
0x77 - "Stack too deep" error in JalaMasterRouter

#216 sherlock-admin closed 4 months ago
1
C1rdan - Hacker can steal stuck wrapped Tokens in MasterRouter

#215 sherlock-admin2 closed 4 months ago
0
Aizen - Remove Liquitidity with permit fails

#214 sherlock-admin closed 4 months ago
0
C1rdan - Wrapped Tokens can be stuck / Wrong amount used in MasterRouter

#213 sherlock-admin2 closed 4 months ago
0
jasonxiale - user will receive less token if `swap path` contains more than one token whose decimal is 0

#212 sherlock-admin closed 4 months ago
1
pash0k - Lack of slippage control

#211 sherlock-admin2 closed 4 months ago
1
miaowu - `ChilizWrapperFactory.sol` is missing the constructor and its parameters and cannot be compiled

#210 sherlock-admin closed 4 months ago
0