Skip to content

Issues: sherlock-audit/2025-01-peapods-finance-judging

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

544 Open 38 Closed
544 Open 38 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Sneaky Zinc Narwhal - some variable have to be update before in the unstake function
#572 opened Feb 17, 2025 by sherlock-admin4
Sneaky Zinc Narwhal - _amountOutMin should be override
#571 opened Feb 17, 2025 by sherlock-admin3
Narrow Pewter Spider - Zero-Amount Swap Vulnerability in swapV2Single and swapV3Single
#570 opened Feb 17, 2025 by sherlock-admin2
Main Infrared Hyena - The _msg.sender cant be trusted with Index Funds
#569 opened Feb 17, 2025 by sherlock-admin4
Sneaky Zinc Narwhal - the _getYieldFees can be bypassed
#568 opened Feb 17, 2025 by sherlock-admin3
Rich Grey Crocodile - Users can still dilute and steal rewards using an external flashloan
#567 opened Feb 17, 2025 by sherlock-admin2
Chilly Wool Ladybug - Incorrect address of oracle in DualOracleChainlinkUniV3
#566 opened Feb 17, 2025 by sherlock-admin4
Crazy Cyan Worm - Missing Slippage Protection in WeightedIndex.debond Enables Flash Loan-Powered Sandwich Attacks
#565 opened Feb 17, 2025 by sherlock-admin3
Crazy Cyan Worm - Missing Slippage Protection in WeightedIndex.debond Enables Flash Loan-Powered Sandwich Attacks
#564 opened Feb 17, 2025 by sherlock-admin2
Huge Cyan Cod - Attacker can gas grief user transactions by using rewards
#563 opened Feb 17, 2025 by sherlock-admin4
Crazy Cyan Worm - Residual Allowance in DEX Handler Enables PAIRED_LP_TOKEN Drain
#562 opened Feb 17, 2025 by sherlock-admin3
Energetic Opaque Elephant - Insufficient Handling of Transfer Fees in DecentralizedIndex::_transferFromAndValidate Causes Legitimate Transactions to Revert
#561 opened Feb 17, 2025 by sherlock-admin2
Crazy Cyan Worm - Early Withdrawals Undercharge Penalty Fees When Debond Fee <10 BPS
#560 opened Feb 17, 2025 by sherlock-admin4
Crazy Cyan Worm - Missing collateral health checks in LeverageManager.withdrawAssets will cause bad debt accumulation as users withdraw below liquidation thresholds
#559 opened Feb 17, 2025 by sherlock-admin3
Rich Grey Crocodile - Users can sandwich attack rewards coming in to TokenRewards.sol by sandwich with the stake and unstake functions of StakingPoolToken.sol
#558 opened Feb 17, 2025 by sherlock-admin2
Bent Beige Dachshund - Some users may not be able to use some multi pods
#557 opened Feb 17, 2025 by sherlock-admin4
Crazy Cyan Worm - PodUnwrapLocker will cause financial loss for users as debond fees are applied during lock creation
#556 opened Feb 17, 2025 by sherlock-admin3
Sneaky Zinc Narwhal - some funds will not be converted nor returned to the depositor
#555 opened Feb 17, 2025 by sherlock-admin2
Chilly Wool Ladybug - An attacker can DOS addLvfSupportForPod for a given pod
#554 opened Feb 17, 2025 by sherlock-admin4
Rich Grey Crocodile - Tokens waiting in _rewardsSwapAmountInOverride to be re-tried is not re-tried before setShares in TokenRewards.sol
#553 opened Feb 17, 2025 by sherlock-admin3
Delightful Syrup Scorpion - Double Debond Fee Application in _calculateBasePerPTkn()
#552 opened Feb 17, 2025 by sherlock-admin2
Chilly Wool Ladybug - Incorrect address of V3_POS_MGR on Base would break V3Locker
#551 opened Feb 17, 2025 by sherlock-admin4
Delightful Syrup Scorpion - Double Debond Fee Application in _calculateBasePerPTkn()
#550 opened Feb 17, 2025 by sherlock-admin3
Huge Cyan Cod - Interest rate can be manipulated by regular deposit calls
#549 opened Feb 17, 2025 by sherlock-admin2
Nutty Spruce Octopus - Incorrect refund logic in _addLeveragePostCallback leads to potential fund misallocation
#548 opened Feb 17, 2025 by sherlock-admin4
ProTip! Type g i on any issue or pull request to go back to the issue listing page.