issues
search
sherlock-audit
/
2024-04-teller-finance-judging
10
stars
9
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
BoRonGod - Current system is not capable with Fee on transfer tokens
#205
sherlock-admin4
closed
4 months ago
0
tjudz - high Mitigating Inflation Attacks in Decentralized Finance
#204
sherlock-admin3
closed
4 months ago
0
merlin - There is no minAmount protection in the addPrincipalToCommitmentGroup and burnSharesToWithdrawEarnings functions
#203
sherlock-admin2
closed
4 months ago
0
BoRonGod - Tokens like MKR cannot be used in LenderCommitmentGroup_Smart
#202
sherlock-admin4
closed
4 months ago
0
bareli - inflation attack by token transfer
#201
sherlock-admin3
closed
4 months ago
1
NoOne - M-4: Reentrancy Attack in liquidateDefaultedLoanWithIncentive Function
#200
sherlock-admin2
closed
4 months ago
1
BoRonGod - No Revert on Failure tokens can trick LenderCommitmentGroup_Smart to receive free shares
#199
sherlock-admin4
closed
4 months ago
0
mgf15 - IERC20.transferFrom wil fail for USDT
#198
sherlock-admin3
closed
4 months ago
0
EgisSecurity - LenderCommitmentGroup_Smart.sol#liquidateDefaultedLoanWithIncentive() - Liquidator only liquidates principal and does not account for interest
#197
sherlock-admin2
closed
4 months ago
0
BoRonGod - LenderCommitmentGroupShares is vulnerable to inflate attack
#196
sherlock-admin4
closed
4 months ago
0
mgf15 - `executeOperation` will revert if _flashToken is USDT
#195
sherlock-admin3
closed
4 months ago
0
Bauchibred - Return values of transfers/approvals are not checked `LenderCommitmentGroup_Smart.sol`
#194
sherlock-admin2
closed
4 months ago
0
BengalCatBalu - Fee-on-transfer Token & Non revert on failure token could broke logic and result in a DoS of `FlashRolloverLoan_G5::rolloverWithFlashLoan`
#193
sherlock-admin4
closed
4 months ago
0
Bauer - If repayment fails, the lender may lose funds
#192
sherlock-admin3
closed
4 months ago
0
EgisSecurity - LenderCommitmentGroup_Smart.sol#_generateTokenNameAndSymbol() - Some tokens have non `string` metadata fields
#191
sherlock-admin2
closed
4 months ago
0
Bandit - Shares Withdrawn Can Round In Favor Of User
#190
sherlock-admin4
closed
4 months ago
2
Bandit - Loss From `tokenDifferenceFromLiquidations` Can be Avoided Through Frontrunning
#189
sherlock-admin3
closed
4 months ago
0
NoOne - M-3: Reentrancy Vulnerability in burnSharesToWithdrawEarnings Function
#188
sherlock-admin2
closed
4 months ago
1
OMEN - sharesExchangeRateInverse has to be rounding up
#187
sherlock-admin4
closed
4 months ago
2
EgisSecurity - `FlashRolloverLoan_G5::_acceptCommitment` with `smartCommitmentAddress` uses wrong signature
#186
sherlock-admin3
closed
4 months ago
0
EgisSecurity - TellerV2.sol#lenderAcceptBid() - Marketplace fee recipient can be address(0), resulting in a DoS of the function
#185
sherlock-admin2
closed
4 months ago
1
EgisSecurity - `LendderCommitmentGroup::_calculateCollateralTokensAmountEq` may be manipulated
#184
sherlock-admin4
closed
4 months ago
0
merlin - getSqrtTwapX96 with twapInterval != 0 will show incorrect price for negative ticks
#183
sherlock-admin3
closed
4 months ago
0
EgisSecurity - Unchecked `transferFrom` value may lead to borrower falsy repaying loan
#182
sherlock-admin2
closed
4 months ago
0
BengalCatBalu - Using transferFrom insted safeTransferFrom can lead to incorrect logic with non revert on failure
#181
sherlock-admin4
closed
4 months ago
0
EgisSecurity - TellerV2.sol#lenderAcceptBid() - Protocol fee and marketplace fee can change after the borrower `submitBid`
#180
sherlock-admin3
closed
4 months ago
0
NoOne - M-2: Reentrancy Risk in addPrincipalToCommitmentGroup Function
#179
sherlock-admin2
closed
4 months ago
1
EgisSecurity - If `repayLoanCallback` address doesn't implement `repayLoanCallback` try/catch won't go into the catch and will revert the tx
#178
sherlock-admin4
opened
4 months ago
2
EgisSecurity - LenderCommitmentGroup_Smart.sol#getCollateralRequiredForPrincipalAmount() - Doesn't scale by 1e18
#177
sherlock-admin3
closed
4 months ago
0
EgisSecurity - LenderCommitmentGroup_Smart.sol - `repayLoanCallback` can be weaponized by other lenders
#176
sherlock-admin2
closed
4 months ago
0
Timenov - Principal can be added when contract is paused.
#175
sherlock-admin4
closed
4 months ago
0
EgisSecurity - LenderCommitmentGroup_Smart.sol - If a loan gets escrowed, the contract can't get the funds out
#174
sherlock-admin3
closed
4 months ago
0
OMEN - get sqrt twap price will be incorrect if tick become negative
#173
sherlock-admin2
closed
4 months ago
0
EgisSecurity - __Ownable_init is missing in LenderCommitmentGroup_Smart and TellerV2
#172
sherlock-admin4
closed
4 months ago
0
EgisSecurity - TellerV2.sol#_liquidateLoanFull() - Doesn't set the reputation mark correctly
#171
sherlock-admin3
closed
4 months ago
1
EgisSecurity - TellerV2.sol#_lenderCloseLoanWithRecipient() - Doesn't update borrower reputation
#170
sherlock-admin2
closed
4 months ago
0
EgisSecurity - LenderCommitmentGroup_Smart.sol#liquidateDefaultedLoanWithIncentive() - The function doesn't send collateral to liquidator
#169
sherlock-admin4
closed
4 months ago
0
EgisSecurity - TellerV2.sol - Liquidators have no incentive to liquidate loans
#168
sherlock-admin3
closed
4 months ago
1
merlin - The SmartCommitmentForwarder smart contract isn't compatible with FlashRolloverLoan_G5.sol
#167
sherlock-admin2
closed
4 months ago
0
EgisSecurity - TellerV2.sol - Several function incorrectly check lender of loan
#166
sherlock-admin4
closed
4 months ago
0
OMEN - iq 200 user will exploit the interest amount distribution and avoid loss from liquidation
#165
sherlock-admin3
closed
4 months ago
0
aman - The user could receive No `poolSharesToken` to claim his deposited tokens
#164
sherlock-admin2
closed
4 months ago
1
Bauer - Front-running repayments to steal rewards from the protocol
#163
sherlock-admin4
closed
4 months ago
0
EgisSecurity - `LenderCommitmentGroup_Smart.sol::burnSharesToWithdrawEarnings` steal previous depositors funds
#162
sherlock-admin3
closed
4 months ago
0
Bandit - First Depositor Attack Still Works With Some Adjustments
#161
sherlock-admin2
closed
4 months ago
0
EgisSecurity - `LenderCommitmentGroup_Smart` if all shares are burned after accrued interest, new depositor loosees part of his funds
#160
sherlock-admin4
closed
4 months ago
2
Bandit - Shares Minted Can Round In Favor Of User
#159
sherlock-admin3
closed
3 months ago
3
merlin - The FlashRolloverLoan_G5 smart contract invokes a function that has not been implemented
#158
sherlock-admin2
closed
4 months ago
0
EgisSecurity - User can easily DoS `FlashRolloverLoan_G5` for USDT loans
#157
sherlock-admin4
closed
4 months ago
0
Bandit - Liquidator Can Be Sandwiched or Self Sandwich To Capture `tokenDifferenceFromLiquidations`
#156
sherlock-admin3
closed
4 months ago
0
Previous
Next