
7x
Payouts

2x
Top 10

5x
Top 25

7x
Top 50
All
Sherlock
Code4rena
CodeHawks
Mar '25
Jan '25
high
Malicious User Can Inflate Rewards, Depleting the Pool for Honest Users.
high
`Pool::transferReserveToAuction` Will Always Revert Due to Incorrect Period
high
Market Rate Calculation Error in LEVERAGE Token Redemption
high
Incorrect Calculation of Token Creation and Redemption Rates Due to BondOracleAdapter
medium
Malicious User Can Grief an Auction by Manipulating Pool Reserves
medium
Unable to Remove Bid Due to USDC Blacklist
medium
The `PreDeposit._deposit()` Logic Will Lock User `BPT` Token Funds in the BalancerRouter
medium
Inaccurate Share Calculations Due to Inclusion of Failed Auctions
medium
Incorrect Precision Adjustment in Token Rate Calculations
Dec '24
high
Incorrect Ether Recipient in Liquidation
high
Updating the `downsideProtected` in the CDS Contract Lacks Access Control
high
Complete loss of USDT funds from the Treasury contract
high
Borrower-Set Strike Price Mechanism Can Lead to Collateral Losses for Users Under Volatile Market Conditions
medium
Loss of User Funds Due to Incorrect LZ Fee Handling in Borrowing and CDS Contracts
medium
The `liquidationType1` function in the borrowLiquidation contract reverts unexpectedly when calculating the yields
medium
`liquidationType2` Requires Admin to Fund Liquidations
medium
Inability to Withdraw ETH/tokens in BorrowLiquidation Contract if `closeThePositionInSynthetix` is Called
medium
Logical Vulnerability in deposit and withdraw Functions of Treasury contract that Allowing Manipulation of `noOfBorrowers` State