Payouts
2nd Places
3rd Places
Top 10
All
Sherlock
Feb '25
high
Liquidations will be significantly delayed due to incorrect maths
medium
Wrong variable usage upon withdrawing, resulting in unexpected results
medium
Multi-hop swaps are not properly supported, the code will run OOG
medium
Tick spacing of 1 does not work properly
medium
Setting the secondary position will cause unexpected results
Jan '25
Findings not publicly available for private contests.
Findings not publicly available for private contests.
Dec '24
Findings not publicly available for private contests.
Oct '24
Aug '24
high
Shares of a user will be wrong after a liquidation
high
Wrong interest rate after a liquidation
high
`getSupplyBalance()` and `getDebtBalance()` return wrong values
high
Interest rate will be wrong after a repay
high
Liquidations will be executed with wrong values
high
Withdrawals might be DoS in certain cases and funds can get stuck
medium
Repayments using the NFT position manager will revert in a lot of cases
medium
Using a hardcoded value for the Chainlink stale price check is dangerous
medium
Not including Chainlink decimals upon calculations will lead to accounting issues
medium
Users can increase their rewards and dilute rewards for other users
medium
Funds will always be stuck in a pool and unexpected reverts will occur upon reallocations
medium
The `Pool` contract can be DoSed
medium
`Superpool` contract doesn't strictly follow EIP4626
medium
Superpool can not be paused despite the implemented functionality
medium
Not removing a token from the position assets upon an owner removing a token from the known assets will cause huge issues
medium
Liquidations will revert if a position has been blacklisted for USDC
medium
Reallocations will often fail upon using USDT
medium
The Redstone oracle can report stale prices
medium
Partial liquidations are next to impossible to happen despite the code being supposed to allow them