issues
search
sherlock-audit
/
2024-07-kwenta-staking-contracts-judging
1
stars
0
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Sparkly Grape Fly - Unprotected USDC Recovery Leading to Draining of Staking Rewards
#182
sherlock-admin3
closed
1 month ago
0
Unique Chrome Tuna - The recoverERC20 function prohibits recovering KWENTA tokens, but permits USDC
#181
sherlock-admin4
closed
1 month ago
0
Sparkly Grape Fly - Checkpoint Inconsistency in StakingRewardsV2 Leading to Manipulable Fee Distribution in TokenDistributor
#180
sherlock-admin2
closed
1 month ago
0
Sparkly Grape Fly - Overflow in Checkpoint Value Leading to Incorrect Balance Tracking and Reward Distribution
#179
sherlock-admin3
closed
1 month ago
0
High Jade Raccoon - _addCheckpoint doesn't work as intended
#178
sherlock-admin4
closed
1 month ago
0
Itchy Scarlet Ladybug - Users cannot exit all staked tokens through the exit function
#177
sherlock-admin2
closed
1 month ago
0
Mean Concrete Eagle - Stakers will loss USDC Rewards on every reward notification
#176
sherlock-admin3
closed
1 month ago
0
Modern Grape Bull - There may be a dust amount of USDC/kwenta remaining in the contract, where kwenta will be permanently stuck
#175
sherlock-admin4
closed
1 month ago
0
Modern Grape Bull - The system has not imposed any restrictions on the recovery of the reward token USDC
#174
sherlock-admin2
closed
1 month ago
0
Lively Indigo Cricket - Add support for reward Calculation of USDC
#173
sherlock-admin3
closed
1 month ago
0
High Jade Raccoon - `StakingRewardsNotifier` can be more gas efficient
#172
sherlock-admin4
closed
1 month ago
0
Zesty Red Chinchilla - Double calling `rewardPerToken` in function `_updateReward()` increases gas cost.
#171
sherlock-admin2
closed
1 month ago
0
eLSeR17 - Users may need to wait for longer than expected to get their rewards
#170
sherlock-admin4
closed
1 month ago
0
0xlucky - In StakingRewardNotifier , notifyRewardAmount() is only called by supplyschedule but fucntion is not called from contract.
#169
sherlock-admin3
closed
1 month ago
0
AresAudits - Cooldown Period Bypass via Minimal Staking
#168
sherlock-admin2
closed
1 month ago
0
Afriaudit - Reward Rate Dilution Caused by Zero Reward Inputs in the StakingRewardsV2 Contract
#167
sherlock-admin4
closed
1 month ago
1
Bozho - Rewards in the `StakingRewardsV2.sol` contract for the initial period can be lost
#166
sherlock-admin3
closed
1 month ago
0
0xLeveler - `StakingRewardsV2:RecoverERC20` can revert when called and funds stuck in staking contract can be lost forever.
#165
sherlock-admin2
closed
1 month ago
0
unique - The calculation for `rewardRateUSDC` will be incorrect if set to zero.
#164
sherlock-admin4
closed
1 month ago
0
Bozho - `rewardPerTokenStored` contract can be inflated and rewards can be stolen
#163
sherlock-admin3
closed
1 month ago
0
Bozho - `StakingRewardsV2.sol#compound()` function is incorrectly implemented
#162
sherlock-admin2
closed
1 month ago
0
Atharv - Vulnerability in Staking Reward Distribution: Potential Front-running Attack by Minimal Wei Staking
#161
sherlock-admin4
closed
1 month ago
0
PratRed - Kwenta tokens cannot be recovered
#160
sherlock-admin3
closed
1 month ago
0
Bozho - `unstakeEscrowSkipCooldown()` should not be controlled by `whenNotPaused` modifier
#159
sherlock-admin2
closed
1 month ago
1
AresAudits - Reward Distribution Inconsistency Due to Dynamic Reward Duration Changes
#158
sherlock-admin4
closed
1 month ago
0
Bozho - `StakingRewardsV2.sol` contract may not work properly on Optimism due to use of `block.number`
#157
sherlock-admin3
closed
1 month ago
1
Bozho - Users who backrunning `StakingRewardsV2.sol#notifyRewardAmount()` function with `StakingRewardsV2.sol#stake()` receive same rewards as users staking since `periodFinish`
#156
sherlock-admin2
closed
1 month ago
0
AresAudits - `balanceAtTime` Function Returns Nearest Balance Instead of Exact Balance
#155
sherlock-admin4
closed
1 month ago
0
dimi6oni - Reward Inflation Due to Timing Discrepancies in notifyRewardAmount Function
#154
sherlock-admin3
closed
1 month ago
1
eLSeR17 - Staking new tokens disallows a user to unstake previously staked tokens
#153
sherlock-admin2
closed
1 month ago
0
Bluedragon - Continuous Reward Accrual During Protocol Paused State Leads to Unfair Reward Distribution
#152
sherlock-admin4
closed
1 month ago
0
Taiger4526 - ’Reward calculation‘ #Frequent updates of lastUpdateTime for small stakes may affect the reward calculation for previous stakers
#151
sherlock-admin2
closed
1 month ago
0
AresAudits - Spaming of Mapping in `approveOperator` Function can lead to corruption
#150
sherlock-admin4
closed
1 month ago
0
10ap17 - Missing Storage Gap
#149
sherlock-admin3
closed
1 month ago
0
PratRed - No storage gap would cause storage collision.
#148
sherlock-admin2
closed
1 month ago
0
AresAudits - Inefficient `Cooldown` Process Due to `userLastStakeTime` Not Being Updated in `unstake` Function
#147
sherlock-admin4
closed
1 month ago
0
unique - Zero RewardRate will Halt Reward Distribution for Stakers
#146
sherlock-admin3
closed
1 month ago
0
Ironsidesec - Distribution of USDC to `StakingRewardsNotifier` has issues
#145
sherlock-admin2
closed
1 month ago
0
0xShax2nk.in - Inaccurate scaling factor is used for Reward calculations for USDC Tokens in StakingRewardsV2
#144
sherlock-admin4
closed
1 month ago
0
TessKimy - In Rewards Notifier, notifyRewardAmount is not correctly implemented
#143
sherlock-admin3
closed
1 month ago
0
AresAudits - Underflow in `unstakedEscrowedBalanceOf` Function
#142
sherlock-admin2
closed
1 month ago
1
PratRed - Wrong calculation of usdc rewards.
#141
sherlock-admin4
closed
1 month ago
0
merlin - Precision loss in StakingRewardsV2.notifyRewardAmount
#140
sherlock-admin3
closed
1 month ago
1
AresAudits - Missing Storage Gaps in Upgradeable Smart Contract
#139
sherlock-admin2
closed
1 month ago
0
tpiliposian - Front-Running Risk in Reward Distribution due to Unstaking
#138
sherlock-admin4
closed
1 month ago
0
AresAudits - Incorrect Handling of `mintedAmount` in `notifyRewardAmount` Function
#137
sherlock-admin3
closed
1 month ago
0
LonWof-Demon - Reward loss for the `staker` Due to Manual `stakeEscrow` Function in `stakingRewardV2.sol`.
#136
sherlock-admin2
closed
1 month ago
0
Atharv - Lack of Functionality to Withdraw Rewards to Different Account Can Cause Loss of Rewards
#135
sherlock-admin4
closed
1 month ago
0
PratRed - Rewards for initial period can be lost .
#134
sherlock-admin3
closed
1 month ago
0
dipp - Users might be unable to receive reward if USDC is recovered from the contract
#133
sherlock-admin2
closed
1 month ago
0
Next