
Payouts

3rd Places

Top 10

Top 25
All
Sherlock
Code4rena
CodeHawks
Sep '25
Jan '25
Dec '24
Oct '24
Jul '24
Mar '24
Feb '24
Jan '24
Dec '23
Nov '23
Oct '23
Sep '23
Aug '23
Jul '23
high
During refinance() new Pool balance debt is subtracted twice
high
[H-04] Lender#buyLoan - Malicious user could take over a loan for free without having a pool because of wrong access control
high
Stealing any loan opening for auction through others' lending pool
high
Attacker can steal a loan's collateral and break the protocol
high
A pool lender can fully drain another user's pool by abusing `buyLoan`
gas
Multiple accesses of a mapping/array should use a local variable cache.
gas
CEI pattern not followed in multiple functions in Staking.sol
3.35 USDC • 2 total findings • CodeHawks • 0x11singh99
#91
May '23