Payouts
Top 25
Top 50
All
Sherlock
Code4rena
Jun '23
high
User's assets could be locked in vault forever because of wrong calculation in D3VaultFunding#poolRepayAll()
medium
All D3Pool can only call borrow() or makerDeposit() once for some tokens because of wrong parameters used in ERC20.approve()
medium
Wrong definition of globalQuota could cause inconsistent behavior when user deposit token to vault.
Apr '23