Skip to content

Issues: sherlock-audit/2024-10-debita-judging

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

1,016 Open 52 Closed
1,016 Open 52 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Sunny Pewter Kookaburra - Missing Fallback for Incentives Update will result in Permanent loss of user incentives due to design limitations.
#1022 opened Nov 25, 2024 by sherlock-admin2
Creamy Opal Rabbit - wrong amount of collateral is returned to the borrower when claiming collateral
#1021 opened Nov 25, 2024 by sherlock-admin2
Furry Opaque Seagull - Denial of Service (DOS) and Out of Gas (OOG) Vulnerability in matchOffersV3 Function
#1020 opened Nov 25, 2024 by sherlock-admin2
Little Spruce Seagull - Incorrect Decimal Handling in MixOracle Price Calculation
#1019 opened Nov 25, 2024 by sherlock-admin2
Sunny Pewter Kookaburra - Griefing Attack Through Fake Orders and Lack of Ownership Validation in Buy Orders
#1018 opened Nov 25, 2024 by sherlock-admin2
Crazy Tangerine Mongoose - Collateral Validation Logic in matchOffersV3 Function
#1017 opened Nov 25, 2024 by sherlock-admin2
Lively Goldenrod Pelican - Vulnerability in AuctionFactory.deleteAuction Function
#1016 opened Nov 25, 2024 by sherlock-admin2
Broad Ash Cougar - Risk of Fund Loss Due to Unexpected Withdrawals
#1015 opened Nov 25, 2024 by sherlock-admin2
Future Obsidian Puma - Wrong bribeCountPerPrincipleOnEpoch index update in incentivizePair function
#1014 opened Nov 25, 2024 by sherlock-admin2
Smooth Butter Worm - DebitaPyth.sol: uses 600s instead of 90s in getThePrice()
#1013 opened Nov 25, 2024 by sherlock-admin2
Vast Chocolate Rhino - A malicious user can DoS the matching of offers
#1012 opened Nov 25, 2024 by sherlock-admin2
Lone Tangerine Liger - DebitaV3Aggregator should only allow unique principles in principles array.
#1011 opened Nov 25, 2024 by sherlock-admin2
Original Chili Hare - User can seize most incentives without participating in activity for protocol.
#1010 opened Nov 25, 2024 by sherlock-admin2
Furry Opaque Seagull - DOS Attack on getActiveAuctionOrders Function
#1009 opened Nov 25, 2024 by sherlock-admin2
Micro Ginger Tarantula - The MixOracle::getPrice() function will revert for some pairs, and return completely incorrect price in the rest of the cases
#1008 opened Nov 25, 2024 by sherlock-admin2
Attractive Currant Kitten - offer.maxDeadline is used instead of extendedTime when calculating the fee
#1007 opened Nov 25, 2024 by sherlock-admin2
Sunny Pewter Kookaburra - No Validation of NFT Ownership or veAERO Validity in the Deposit Function of Receipt-veNFT Contract
#1006 opened Nov 25, 2024 by sherlock-admin2
Lone Tangerine Liger - Incorrect implementation logic in deleting method of all factory contract.
#1005 opened Nov 25, 2024 by sherlock-admin2
Cheery Mocha Mammoth - Decimals Not Handled Properly in DebitaV3Aggregator.sol causing innacuracy of prices.
#1004 opened Nov 25, 2024 by sherlock-admin2
Proud Blue Wren - DebitaChainlink.getPrice returns incorrect price during flash crashes
#1003 opened Nov 25, 2024 by sherlock-admin2
Broad Ash Cougar - maxDuration can be set to less then minDuration in DLOImplementation
#1002 opened Nov 25, 2024 by sherlock-admin2
Dapper Latte Gibbon - Incentives will not be updated in updateFunds() function
#1001 opened Nov 25, 2024 by sherlock-admin2
Lone Tangerine Liger - Incorrect return value in DebitaV3Loan::claimCollateralAsNFTLender function
#1000 opened Nov 25, 2024 by sherlock-admin2
Damp Fuchsia Bee - Contract dev forgot to deploy a proxy before creating a borrow order.
#999 opened Nov 25, 2024 by sherlock-admin2
Smooth Butter Worm - Users can pass in malicious oracle addresses during createLendOrder() and createBorrowOrder()
#998 opened Nov 25, 2024 by sherlock-admin2
ProTip! Adding no:label will show everything without a label.