sherlock-audit 2024-06-velocimeter-judging issues

sherlock-audit / 2024-06-velocimeter-judging

11 stars 7 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

1nc0gn170 - Inconsistency between `balanceOfNFT`, `balanceOfNFTAt`, `balanceOfAtNFT` and `_balanceOfNFT` functions

#567 sherlock-admin4 closed 3 months ago
0
bin2chen - poke() be killed gauge still has the some percentage

#566 sherlock-admin3 closed 3 months ago
0
McToady - `Pair` contract incorrectly assumes the underlying tokens are not misbehaving leading to potential to break core AMM invariant

#565 sherlock-admin2 closed 3 months ago
1
Audinarey - Approved users cannot merge tokens for owners

#564 sherlock-admin4 closed 3 months ago
0
1nc0gn170 - Incorrect Rewards distribution due to cached supply.

#563 sherlock-admin3 closed 3 months ago
0
Hajime - `_bribes` and `_tokens` length are not checked to be equal

#562 sherlock-admin2 closed 3 months ago
1
bin2chen - killGaugeTotally() needs to reduce totalWeight

#561 sherlock-admin4 closed 3 months ago
0
bin2chen - exerciseLp/exerciseVe slippage check wrong

#560 sherlock-admin3 closed 3 months ago
0
sonny2k - Expired locks can be used to claim rewards

#559 sherlock-admin2 closed 3 months ago
0
StraawHaat - The `deposit_for` function lacks restrictions on the types of NFT, and this is a problem

#558 sherlock-admin4 closed 3 months ago
1
Minato7namikazi - fees are deducted from (`_balance0` and `_balance1`) regardless of whether `hasGauge` is true or false.

#557 sherlock-admin3 closed 3 months ago
1
blackhole - Claimable gauge distributions are locked when killGaugeTotally or pauseGauge is called

#556 sherlock-admin2 closed 3 months ago
0
blackhole - First liquidity provider of a stable pair can DOS the pool

#555 sherlock-admin4 closed 3 months ago
0
blackhole - Inflated voting balance due to duplicated veBVM within a checkpoint

#554 sherlock-admin3 closed 3 months ago
0
Critical715 - `detachTokenFromGauge` function in the `Voter` contract is missing a check for msg.sender.

#553 sherlock-admin2 closed 3 months ago
0
Hajime - Lack of revert statement in `Voter.poke` results in freezing of yield for an entire epoch

#552 sherlock-admin4 closed 3 months ago
1
Minato7namikazi - unhandled case in the `whitelist` and `blacklist` functions

#551 sherlock-admin3 closed 3 months ago
1
Minato7namikazi - `activeGaugeNumber` could be incremented multiple times for the same gauge within an epoch.

#550 sherlock-admin2 closed 3 months ago
1
Ch_301 - `Minter.sol` is using an outdated value of `activeGaugeNumber`

#549 sherlock-admin4 closed 3 months ago
0
Minato7namikazi - supply tracking issues in the `_deposit_for` and `_remove_from` functions.

#548 sherlock-admin3 closed 3 months ago
1
PASCAL - Anyone can prolong all maxlock users locktime

#547 sherlock-admin2 closed 3 months ago
0
Minato7namikazi - unhandled missed case in merge function

#546 sherlock-admin4 closed 3 months ago
1
Ch_301 - `killGaugeTotally()` disrupts `_reset()` for newEpoch votes

#545 sherlock-admin3 closed 3 months ago
0
Critical715 - Users might lose their voting power.

#544 sherlock-admin2 closed 3 months ago
0
Minato7namikazi - important logic bug in the `split` function

#543 sherlock-admin4 closed 3 months ago
1
Ch_301 - Wrong percentage for team emission

#542 sherlock-admin3 closed 3 months ago
0
Ch_301 - Timestamp not updated

#541 sherlock-admin2 closed 3 months ago
0
pseudoArtist - depositFor function should be restricted to approved NFT types.

#540 sherlock-admin4 closed 3 months ago
0
Aymen0909 - Attacker could increase users lock time by exercising small amount with `exerciseLp`

#539 sherlock-admin3 closed 3 months ago
0
cu5t0mPe0 - OptionTokenV4 will be Dos

#538 sherlock-admin2 closed 3 months ago
0
Ruhum - User can increase voting power by transferring veNFTs within the same block

#537 sherlock-admin4 closed 3 months ago
0
0xlookman - 0xlookman - `votingEscrow::max_lock` can prevent a user's locked balance from unlocking when `Max_Lock` is Enabled.

#536 sherlock-admin3 closed 3 months ago
0
AMOW - Gauge's rewardRate will be griefed when new rewards are added

#535 sherlock-admin2 closed 3 months ago
0
AMOW - Pausing and resuming gauge deletes its' rewards

#534 sherlock-admin4 closed 3 months ago
0
AMOW - Unsafe casting throughout entire RewardsDistributor

#533 sherlock-admin3 closed 3 months ago
0
AMOW - Voting for pool once and not calling `poke` will keep undecayed vote weight in subsequent weeks

#532 sherlock-admin2 closed 3 months ago
0
tvdung94 - nft max lock arrays could be filled with dust nfts

#531 sherlock-admin4 closed 3 months ago
1
cryptic - `OptionTokenV4::getPaymentTokenAmountForExerciseLp` uses the spot price of the `Pair`, which is easily manipulatable

#530 sherlock-admin3 closed 3 months ago
4
cryptic - The `Pair` contract will revert where overflow is desired, causing loss of funds

#529 sherlock-admin2 closed 3 months ago
0
cryptic - `RewardsDistributorV2` contract can never distribute rewards

#528 sherlock-admin4 closed 3 months ago
0
cryptic - Claiming rewards may DoS due to underflow from unsafe casting in `RewardsDistributorV2`

#527 sherlock-admin3 closed 3 months ago
1
cryptic - `VotingEscrow::_findWhatCheckpointToWrite` returns an incorrect index in some cases since `Checkpoint timestamp` is never set

#526 sherlock-admin2 closed 3 months ago
0
cryptic - `VotingEscrow` unsafe downcasting from `uint256` to `int128` may cause some users' tokens to be permanently locked and never have voting power

#525 sherlock-admin4 closed 3 months ago
0
cryptic - `OptionTokenV4::exerciseVe` and `OptionTokenV4::exerciseLp` are missing checks for minimum LP tokens returned, causing loss of funds

#524 sherlock-admin3 closed 3 months ago
0
cryptic - Rewards are locked if gauge with claimable rewards is killed

#523 sherlock-admin2 closed 3 months ago
0
cryptic - Killing gauges doesn't decrease number of active gauges, causing locked rewards

#522 sherlock-admin4 closed 3 months ago
0
cryptic - Exercising LP/veNFT may DoS if `payment token` is a revert on 0 transfer token

#521 sherlock-admin3 closed 3 months ago
1
cryptic - Pausing and unpausing gauges will cause the gauge to lose all claimable rewards

#520 sherlock-admin2 closed 3 months ago
0
cryptic - `OptionTokenV4::expire` will change the 1:1 ratio of the supply of options token to underlying token, rendering some options tokens useless

#519 sherlock-admin4 closed 3 months ago
1
Audinarey - `Voter._vote(...)` does not apply all the available voting power during voting due to rounding error

#518 sherlock-admin3 closed 3 months ago
1

Previous Next