Skip to content

Issues: sherlock-audit/2024-06-boost-aa-wallet-judging

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

468 Open 22 Closed
468 Open 22 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

0x539.eth - Random Generation Can Be Manipulated
#469 opened Sep 20, 2024 by sherlock-admin4
pwning_dev - Balance Check Before Transfer
#468 opened Sep 20, 2024 by sherlock-admin2
Minato7namikazi - Incorrect Incentive Initialization in BoostCore!
#467 opened Sep 20, 2024 by sherlock-admin4
Aymen0909 - claimed[claimTarget] not recorded in CGDAIncentive::claim
#466 opened Sep 20, 2024 by sherlock-admin2
SovaSlava - User could validate one action twice, using malleable hash
#465 opened Sep 20, 2024 by sherlock-admin4
Minato7namikazi - ETH Locked in Budget Contract in the protocol
#464 opened Sep 20, 2024 by sherlock-admin2
0x539.eth - Wrong Calculation Of Current Reward
#463 opened Sep 20, 2024 by sherlock-admin4
scyron6 - clawback is not callable on provided incentive contracts because owner is set to BoostCore address
#462 opened Sep 20, 2024 by sherlock-admin2
ge6a - Missing max participants check
#461 opened Sep 20, 2024 by sherlock-admin4
denzi_ - The incentive contracts are not compatible with rebasing/deflationary/inflationary tokens Sponsor Confirmed The sponsor acknowledged this issue is valid Won't Fix The sponsor confirmed this issue will not be fixed
#460 opened Sep 20, 2024 by sherlock-admin2
0xloophole - Incorrect Claim Fee Distribution
#459 opened Sep 20, 2024 by sherlock-admin4
Albort - Uninitialized immutable variable
#458 opened Sep 20, 2024 by sherlock-admin2
pwning_dev - Reward Depletion in clawback (RAFFLE strategy)
#457 opened Sep 20, 2024 by sherlock-admin4
PranavGarg - Incorrect fee calculation logic in boost claim function
#456 opened Sep 20, 2024 by sherlock-admin2
RealMaushish - Unbounded loop can lead to a dos
#455 opened Sep 20, 2024 by sherlock-admin4
Ironsidesec - Immutable VALIDATOR state is never set in the constructor
#454 opened Sep 20, 2024 by sherlock-admin2
TessKimy - Valid signatures can be used to claim other incentives
#453 opened Sep 20, 2024 by sherlock-admin4
pwning_dev - Insecure Randomness in drawRaffle
#452 opened Sep 20, 2024 by sherlock-admin2
AresAudits - Signature Malleability Issue in validate Function
#451 opened Sep 20, 2024 by sherlock-admin4
Aymen0909 - Incorrect distribution of claimFee in BoostCore::_routeClaimFee
#450 opened Sep 20, 2024 by sherlock-admin2
RealMaushish - Incorrect casting in SignerValidator.sol
#449 opened Sep 20, 2024 by sherlock-admin4
SovaSlava - Signature replay attack, due to missing chainID value in EIP712 TYPEHASH
#448 opened Sep 20, 2024 by sherlock-admin2
PranavGarg - maxParticipants and protocolFee are unused in BoostCore contract
#447 opened Sep 20, 2024 by sherlock-admin4
0xloophole - Incorrect Reward Decay Calculation in CGDAIncentive
#446 opened Sep 20, 2024 by sherlock-admin2
Albort - Reliance on supportsInterface for Security
#445 opened Sep 20, 2024 by sherlock-admin4
ProTip! Follow long discussions with comments:>50.