Skip to content

Issues: Cyfrin/2023-07-beedle

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

1,503 Open 618 Closed
1,503 Open 618 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Proper check-effect-interactions pattern not followed all over the protocol finding-cei-i human-checked info
#2121 opened Aug 8, 2023 by codehawks-bot
1
Borrowers can evade paying borrowing fees by splitting their loans into smaller ones finding-rounding-error-with-small-fees low need-approval
#2119 opened Aug 8, 2023 by codehawks-bot
1
The lack of a WETH-Profits Token pair upon calling sellProfits can expose it to malicious pool creation finding-front-run-sellprofits-with-pool-creation medium selected
#2118 opened Aug 8, 2023 by codehawks-bot
3
Minimize Storage Reads/Writes finding-storage-g gas human-checked
#2115 opened Aug 8, 2023 by codehawks-bot
loanRatio lacks precision for pairs of low decimal tokens and high decimal tokens, leading to unfair conditions for either side finding-max-loan-precision-loss medium
#2114 opened Aug 8, 2023 by codehawks-bot
A lender can restart a loan's auction period by calling giveLoan finding-lender-can-cancel-auctions medium
#2111 opened Aug 8, 2023 by codehawks-bot
The collateral ratio doesn't get checked when buying an auctioned loan, disabling some protocol functionalities for the borrower finding-buyloan-collateral-ratio-bypassed medium
#2110 opened Aug 8, 2023 by codehawks-bot
Refinancing in the same pool requires it to have a higher balance than needed because of a flawed check finding-LoanTooLarge low selected
#2108 opened Aug 8, 2023 by codehawks-bot
4
OWNABLE CONTRACT HAS A SINGLE STEP OWNERSHIP TRANSFER ai-dup-1412 ai-dup-1484 finding-ownership-transfer low
#2105 opened Aug 8, 2023 by codehawks-bot
Debt gets subtracted twice when refinancing a loan ai-dup-6 ai-dup-291 ai-dup-391 ai-dup-471 ai-dup-529 ai-dup-747 ai-dup-978 ai-dup-1178 ai-dup-1204 ai-dup-1241 ai-dup-1344 ai-dup-1700 ai-dup-1753 ai-dup-1932 finding-double-refinance-debt high
#2103 opened Aug 8, 2023 by codehawks-bot
Use if-revert instead of require finding-if-revert-g gas human-checked
#2102 opened Aug 8, 2023 by codehawks-bot
1
Users' loan debt can be increased involuntarily by the interest already accrued finding-compounding-interest high
#2101 opened Aug 8, 2023 by codehawks-bot
1
Input arrays with mismatched length will make giveLoan to throw ai-dup-721 ai-dup-1048 finding-input-validation-array-size low
#2100 opened Aug 8, 2023 by codehawks-bot
Tokens with lower decimals do not generate appropriate interest amounts finding-bad-decimal-handling-makes-rounding-errors low
#2099 opened Aug 8, 2023 by codehawks-bot
1
Lack of Array Size Validation in Function Calls ai-dup-80 ai-dup-547 ai-dup-1953 finding-input-validation-array-size low
#2097 opened Aug 8, 2023 by codehawks-bot
Gas Optimizations ai-dup-295 finding-storage-g gas human-checked
#2096 opened Aug 8, 2023 by codehawks-bot
Deposit backrunning a WETH transaction to the contract with a deposit locks a fraction of those funds finding-update-call-on-weth-transfer high
#2095 opened Aug 8, 2023 by codehawks-bot
3
Operator can steal customers collateral via front running finding-front-run-auction-length medium
#2094 opened Aug 8, 2023 by codehawks-bot
Token transfer' does not handle case if the tokens support fee-on-transfer finding-fee-on-transfer medium
#2093 opened Aug 8, 2023 by codehawks-bot
update() not getting called right after a WETH amount has been sent will cause users to lose staking rewards finding-update-call-on-weth-transfer high selected
#2092 opened Aug 8, 2023 by codehawks-bot
3
A big fraction of reward WETH can get locked with a donation attack finding-update-call-on-weth-transfer high
#2091 opened Aug 8, 2023 by codehawks-bot
1
WETH deposited before the contract gets any staked tokens can get permanently locked finding-staking-initial-rewards-lost-before-stakin high
#2090 opened Aug 8, 2023 by codehawks-bot
2
Bad share accounting allows for sandwich attacks when WETH gets filled in as a reward for stakers finding-mev-weth-staker-reward high
#2089 opened Aug 8, 2023 by codehawks-bot
The 0.3% fee Uniswap pool for the specified token pair may not be the most liquid one leading to worse price impact and slippage ai-dup-588 ai-dup-1148 finding-uniswap-unoptimal-pool-hopping low need-approval
#2088 opened Aug 8, 2023 by codehawks-bot
1
Unspecified slippage allows sandwich attacks ai-dup-151 ai-dup-297 ai-dup-322 ai-dup-387 ai-dup-566 ai-dup-572 ai-dup-699 ai-dup-778 ai-dup-829 ai-dup-1205 ai-dup-1247 ai-dup-1278 ai-dup-1482 ai-dup-1603 ai-dup-1789 ai-dup-1889 finding-mev-uniswap-amountOutMinimum-is-zero high
#2087 opened Aug 8, 2023 by codehawks-bot
ProTip! What’s not been updated in a month: updated:<2024-12-30.