Payouts
Top 10
Top 25
Top 50
All
Sherlock
Code4rena
Jul '24
high
`mintToken()`, `mintWithBudget()`, and `forge()` in the `TraitForgeNft` Contract Will Fail Due to a Wrong Modifier Used in `EntropyGenerator.initializeAlphaIndices()`
high
The maximum number of generations is infinite
high
Wrong minting logic based on total token count across generations
medium
Forger Entities can forge more times than intended
medium
Pause and unpause functions are inaccessible
medium
`Golden God` Tokens can be minted twice per generation
high
`vote` Function Broken Due to Incorrect Ownership Check in BribeRewarder Contract
high
BribeRewarder Contract Lacks Withdrawal Mechanism Leading to Potential Permanent Loss of Funds
medium
Access Control Vulnerability in MlumStaking Allows Malicious Users to Extend Lock Duration of Others' Positions
medium
Incorrect Lock Duration Calculation for Fee-on-Transfer Tokens in `addToPosition` Function
Apr '24
high
`Registry.sol#updateHoldingPosition` remove position logic is incorrect: should use `ownerConnector` instead of `calculatorConnector` when calculating holdingPositionId.
high
`NoyaValueOracle.getValue` returns an incorrect price when a multi-token route is used
medium
The modifier `onlyExistingRoute` works incorrectly