sherlock-audit 2024-06-allora-judging issues

sherlock-audit / 2024-06-allora-judging

0 stars 0 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

KingNFT - Potential race conditions due to usage of ````sdk.Context```` in concurrent goroutines

#87 sherlock-admin3 opened 4 months ago
1
0x3b - `required_minimum_stake` is not verified when registering network participants

#86 sherlock-admin2 closed 3 months ago
16
LZ_security - RemoveDelegateStake/RemoveStake can write negative value

#85 sherlock-admin4 closed 4 months ago
2
imsrybr0 - RemoveDelegateStake silently handles the error when checking for existing removals

#84 sherlock-admin3 opened 4 months ago
1
imsrybr0 - Some Iterators are not closed in emissions module Keeper

#83 sherlock-admin2 opened 4 months ago
1
imsrybr0 - Mint and Emissions modules register errors with an error code of 1

#82 sherlock-admin4 opened 4 months ago
1
imsrybr0 - Missing AutoCli configuration for UpdateParams message in mint module

#81 sherlock-admin3 closed 4 months ago
0
defsec - Incomplete Topic Processing Due to Continuous Retry on Pagination Error

#80 sherlock-admin2 opened 4 months ago
2
0x3b - `GenerateForecastScores` acidentally updates inferences scores

#79 sherlock-admin4 opened 4 months ago
1
0x3b - `GetCurrentTopicWeight` returns `topicFeeRevenue` without accounting `additionalRevenue`

#78 sherlock-admin3 closed 3 months ago
2
0x3b - Topics can be activated even if they haven't reached `MinTopicWeight`

#77 sherlock-admin2 closed 4 months ago
3
volodya - anyone can rewrite reputer data and worker data

#76 sherlock-admin4 closed 4 months ago
2
Kow - Topic could be activated despite not meeting the minimum topic weight threshold due to double counting of added fee revenue

#75 sherlock-admin3 closed 4 months ago
2
Kow - `AlloraPendingRewardForDelegator` module account could have insufficient rewards due to truncation

#74 sherlock-admin2 opened 4 months ago
1
Kow - Active topics eligible for churning may be skipped due to pagination assuming consecutive topic ids

#73 sherlock-admin4 closed 4 months ago
1
Kow - `GetAllReputersOutput`: If `listenedStakeFraction < minStakeFraction`, the differential will not be properly interpolated to ensure `listenedStakeFraction = minStakeFraction`

#72 sherlock-admin3 closed 4 months ago
2
Minato7namikazi - Logic Bug in the `QuadrupleKeyCodec` Implementation

#71 sherlock-admin2 closed 3 months ago
5
Minato7namikazi - Inconsistent Topic Deactivation In `topic_rewards.go`

#70 sherlock-admin4 closed 4 months ago
2
Minato7namikazi - Inconsistent Handling of Zero Standard Deviation in `rewards_internal.go`

#69 sherlock-admin3 closed 4 months ago
1
Minato7namikazi - Inconsistent Reward Calculation and Distribution in reputer_rewards.go

#68 sherlock-admin2 closed 3 months ago
2
Minato7namikazi - ..

#67 sherlock-admin4 closed 4 months ago
1
Minato7namikazi - logic bug in this IBC middleware code related to packet handling.

#66 sherlock-admin3 opened 4 months ago
1
Minato7namikazi - Inconsistent `valueBundles` Data in `MsgInsertBulkReputerPayload`

#65 sherlock-admin2 closed 3 months ago
2
Minato7namikazi - Inconsistent Precision for `BaseCoinUnit` in Confing

#64 sherlock-admin4 closed 3 months ago
2
Minato7namikazi - Race Condition in Goroutine Handling in topics_handler.go

#63 sherlock-admin3 closed 4 months ago
1
Minato7namikazi - ..

#62 sherlock-admin2 closed 4 months ago
1
Minato7namikazi - ..

#61 sherlock-admin3 closed 4 months ago
1
defsec - Pagination method fails to return complete pages for non-consecutive active topic IDs

#60 sherlock-admin2 closed 3 months ago
3
defsec - AutoCLI Does Not Expose All Query Methods, Limiting CLI Functionality

#59 sherlock-admin4 closed 4 months ago
2
volodya - any user can halt chain with a negative amount request using RemoveDelegateStake

#58 sherlock-admin3 closed 4 months ago
2
volodya - any user can halt chain with a negative amount request using RemoveStake

#57 sherlock-admin2 closed 4 months ago
2
imsrybr0 - Attacker can slow down / halt the chain by queuing multiple stake removals or delegate stake removals

#56 sherlock-admin4 opened 4 months ago
1
imsrybr0 - RemoveStakes and RemoveDelegateStakes silently handle errors in EndBlocker

#55 sherlock-admin3 opened 4 months ago
1
relyt29 - Non-Deterministic Map Range Iteration

#54 sherlock-admin2 closed 4 months ago
2
relyt29 - AlloraInferenceBase Panic when receiving unexpected string responses from WASM

#53 sherlock-admin4 closed 4 months ago
1
volodya - SendDataWithRetry doesn't work properly(Retries will not happen)

#52 sherlock-admin3 opened 4 months ago
1
relyt29 - GetIdsOfActiveTopics Fails to Return Non-Consecutive Values

#51 sherlock-admin2 closed 4 months ago
2
volodya - infererValue value not normalized like other values when topicAllowsNegative is false

#50 sherlock-admin4 closed 3 months ago
2
volodya - ExecuteFunction will not work for generateInferencesRequest and generateLossesRequest

#49 sherlock-admin3 closed 3 months ago
2
defsec - Lack of HTTP Response Status Code Validation

#48 sherlock-admin2 closed 4 months ago
1
defsec - Lack of Timeout leads Resource Exhaustion in API Client

#47 sherlock-admin4 opened 4 months ago
1
zigtur - Funding amount is accounted twice leading to activating topic before reaching the global minimum

#46 sherlock-admin3 opened 4 months ago
2
Yuriisereda - Incorrect highestVotingPower Calculation in argmaxBlockByCount Function Resulting in Incorrect Block Selection

#45 sherlock-admin2 closed 4 months ago
2
Yuriisereda - Missing highestVotingPower Update in argmaxBlockByStake Resulting in Incorrect Block Selection

#44 sherlock-admin4 opened 4 months ago
2
defsec - Incomplete Zero-Height Genesis Preparation in Allora Network

#43 sherlock-admin3 opened 4 months ago
1
volodya - The chain will not be in the correct state when upgraded via a hard fork.

#42 sherlock-admin2 closed 3 months ago
12
volodya - Current APY is not stable long-term according to whitepaper

#41 sherlock-admin4 closed 4 months ago
2
volodya - Treasury cap restriction will not hold and one block per month will be compromised

#40 sherlock-admin3 opened 4 months ago
8
defsec - Inconsistency between NUM_REPUTER_RETRIES constant and MaxRetriesToFulfilNoncesReputer chain parameter

#39 sherlock-admin2 closed 4 months ago
2
defsec - Non-deterministic Ranges in Inference Synthesis Causing Inconsistent State Across Nodes

#38 sherlock-admin4 opened 4 months ago
2

Previous Next