Skip to content

Issues: sherlock-audit/2024-11-oku-judging

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

894 Open 16 Closed
894 Open 16 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Zealous Black Grasshopper - Function used in OracleRelay to get price from the chain link oracles in deprecated
#895 opened Dec 9, 2024 by sherlock-admin3
Zealous Black Grasshopper - Ignoring Confidence Interval for Price Validation
#894 opened Dec 9, 2024 by sherlock-admin2
Mean Brown Barbel - Unused ETH Gets Trapped in Contract
#893 opened Dec 9, 2024 by sherlock-admin3
Rhythmic Charcoal Caribou - Two Pyth Prices Can Be Used in the Same Transaction to Attack LP Pools (Oracleless Contract)
#892 opened Dec 9, 2024 by sherlock-admin2
Formal Cornflower Halibut - Open call in OracleLess.sol can be used for unauthorized calling
#891 opened Dec 9, 2024 by sherlock-admin3
Dazzling Frost Swallow - Reentrancy in fillOrder
#890 opened Dec 9, 2024 by sherlock-admin2
Mean Malachite Frog - All swap calls to any target address can be easily DOS'ed
#889 opened Dec 9, 2024 by sherlock-admin3
Bumpy Boysenberry Goblin - {actor} will {impact} {affected party}
#888 opened Dec 9, 2024 by sherlock-admin2
Little Clay Parakeet - PythOracle Staleness check is inverted
#887 opened Dec 9, 2024 by sherlock-admin3
Zealous Black Grasshopper - Assumption of Fixed Token Exponent in currentValue Function
#886 opened Dec 9, 2024 by sherlock-admin2
Damp Jade Wasp - Incorrect order execution in Bracket::checkInRange function
#885 opened Dec 9, 2024 by sherlock-admin3
1
Pet Rose Chicken - Allowing modifying not pending order leads minOrderSize token getting locked
#884 opened Dec 9, 2024 by sherlock-admin2
Atomic Cider Kangaroo - Denial of Service Risk due to Improper Use of safeApprove()
#883 opened Dec 9, 2024 by sherlock-admin3
Powerful Stone Starling - If user overpays for priceFeed update he will not be refunded
#882 opened Dec 9, 2024 by sherlock-admin2
Lively Corduroy Crab - Unspent token allowance blocks reuse of swap targets
#881 opened Dec 9, 2024 by sherlock-admin3
Mean Brown Barbel - Confidence Intervals of Pyth Network's Prices Are Ignored
#880 opened Dec 9, 2024 by sherlock-admin2
Curly Myrtle Elk - Bracket::execute(...) does not strictly apply the minimum received amount check leading to unwanted reverts
#879 opened Dec 9, 2024 by sherlock-admin3
Lively Pecan Griffin - multiple orders in the same block can be weaponized to steal funds to due blocktimestamp based id generation
#877 opened Dec 9, 2024 by sherlock-admin2
Droll Shadow Crab - Attacker can earn by calling cancelOrder twice
#876 opened Dec 9, 2024 by sherlock-admin3
Zealous Black Grasshopper - Inadequate Check for Stale Price in currentValue Function
#875 opened Dec 9, 2024 by sherlock-admin2
Lone Midnight Stallion - An attacker can take some profit when create a Bracket Order from a Stop Limit Order with 'Swap-On-Fill'.
#874 opened Dec 9, 2024 by sherlock-admin3
Virtual Indigo Shetland - orderid in StopLimit will overwrite order in bracket
#873 opened Dec 9, 2024 by sherlock-admin2
Orbiting Rosewood Swallow - Blacklisted USDT user can cause DOS for all
#872 opened Dec 9, 2024 by sherlock-admin3
Jumpy Sage Pony - An attacker can take advantage of the StopLimit's unlimited allowance to Bracket to steal funds from the StopLimit. Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#871 opened Dec 9, 2024 by sherlock-admin2
2
Lively Pecan Griffin - USDT Token Approval Deadlock in Automated Order Execution System
#870 opened Dec 9, 2024 by sherlock-admin3
ProTip! Follow long discussions with comments:>50.