sherlock-audit 2024-03-flat-money-fix-review-contest-judging issues

sherlock-audit / 2024-03-flat-money-fix-review-contest-judging

3 stars 2 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Manipulating Global Average Price to Cause Denial of Service (DoS) in IFlatcoinVault

#29 sherlock-admin4 closed 3 months ago
1
HighSlippage vulnerability in the `LeverageModule` contract

#28 sherlock-admin3 closed 3 months ago
1
santipu_ - Attacker can steal LPs funds by using different oracle prices in the same transaction

#27 sherlock-admin2 opened 3 months ago
3
Dudex_2004 - The `newAverageEntryPrice` for `averagePrice` is calculating incorrectly.

#26 sherlock-admin4 closed 3 months ago
0
BZ - Reentrancy Vulnerability in `LeverageModule._mint(address)` Leading to Loss of Fund, Double Spending and Spend Manipulation

#25 sherlock-admin3 closed 3 months ago
0
BZ - Exploiting Precision Loss in StableModule for Unfair Withdrawals Which Results to Manipulation of Input Value

#24 sherlock-admin2 closed 3 months ago
0
santipu_ - Invariants will fail when funding fee sets `stableCollateralTotal` to zero

#23 sherlock-admin4 closed 3 months ago
11
BZ - Manipulation and Exploitation of `StableModule` Contract to Manipulate Withdrawal Fees andPpotentially Profit from Exploiting User Funds.

#22 sherlock-admin3 closed 3 months ago
0
BZ - Unprotected Ether Transfer in `OracleModule.updatePythPrice` Resulting to Loss of Funds and Unexpected Failures

#21 sherlock-admin2 closed 3 months ago
0
xiaoming90 - More points were minted to the long trader side

#20 sherlock-admin4 closed 3 months ago
2
xiaoming90 - Code asymmetry of `globalPositions.marginDepositedTotal`

#19 sherlock-admin3 opened 3 months ago
11
xiaoming90 - The issue titled "Oracle can return different prices in same transaction" is not remediated.

#18 sherlock-admin2 closed 3 months ago
1
xiaoming90 - Long traders unable to withdraw their assets

#17 sherlock-admin4 closed 3 months ago
2
xiaoming90 - An accounting error within the protocol could lead to a loss of assets for the affected LPs

#16 sherlock-admin3 closed 3 months ago
4
xiaoming90 - Price deviation check not performed on critical transactions

#15 sherlock-admin2 closed 3 months ago
3
xiaoming90 - Malicious users could grief innocent users into receiving fewer points

#14 sherlock-admin4 closed 3 months ago
0
Dudex_2004 - Vault inflation attack is still be possible

#13 sherlock-admin3 closed 3 months ago
0
santipu_ - Function `checkSkewMax` doesn't take into account the unrealized PnL

#12 sherlock-admin2 closed 3 months ago
3
santipu_ - Funding fee will be inaccurate when leveraged positions are not closed

#11 sherlock-admin4 closed 3 months ago
3
santipu_ - Large amount of points can STILL be minted without any cost

#10 sherlock-admin3 opened 3 months ago
2
santipu_ - When the ETH price goes down, LPs won't be able to withdraw liquidity

#9 sherlock-admin2 closed 3 months ago
32
Bauchibred - Functions using the invariance modifiers could still lead to DOS

#8 sherlock-admin4 closed 3 months ago
5
santipu_ - Collateral cap is not correctly checked due to unrealized PnL

#7 sherlock-admin3 closed 3 months ago
2
Dudex_2004 - Users could get the `liquidatorFee` by calling `liquidate` function themselves.

#6 sherlock-admin2 closed 3 months ago
1
BZ - Potential reentrancy attacks in `announceLeverageAdjust`,`announceLeverageClose`,`announceLeverageOpen`,`announceStableDeposit`,`announceStableWithdraw`and `executeOrder ` due to state changes after external calls which may lead to loss of funds

#5 sherlock-admin4 closed 3 months ago
1
Dudex_2004 - Precision Mismatch in `setLiquidationFeeRatio` and `setLiquidationBufferRatio` Functions.

#4 sherlock-admin3 closed 3 months ago
5
Bauchibred - Large amounts of points can still be minted virtually without any cost

#3 sherlock-admin2 closed 3 months ago
1
Bauchibred - The transfer lock for leveraged position orders can still be easily bypassed

#2 sherlock-admin4 closed 3 months ago
1
bareli - Oracle can return different prices in same transaction

#1 sherlock-admin3 closed 3 months ago
1