Payouts
1st Places
Top 10
Top 25
All
Sherlock
Cantina
Immunefi
Feb '25
medium
`Launch.sol::updateParticipation` uses an incorrect variable to check the minimum user token allocation allowed, which can result in an underflow DOS in certain instances
medium
`userTokens` accounting in `Launch.sol::updateParticipation` is updated incorrectly and can lead to loss of user funds, DOS and a broken invariant
Jan '25
medium
Dec '24
high
high
Bad actors can manipulate USDT/USDA exchange rates in `CDS.redeemUSDT()` to redeem an unlimited amount of USDT until Treasury is drained
high
`borrowing.renewOptions()`'s promised 30 days 80% downside protection is not enforced in the `borrowing.liquidate()` or anywhere in the `borrowing.sol`
medium
CDS deposits' `lockingPeriod` is not enforced in CDS.withdraw(), allowing premature exits and creating unfair advantages
medium
Incorrect global borrower count decrement in `BorrowLib.withdraw()` due to local chain validation
Nov '24