
Payouts

Top 10

Top 25

Top 50
All
Sherlock
Apr '26
high
An attacker will block AMM, Vault, or LoanBroker teardown and force repeated deletion failures for protocol owners
high
MPT Clawback from AMM Permanently Blockable via MPToken Deletion + Single-Asset XRP Withdrawal
medium
An unauthorized payer will deliver restricted MPTs to unauthorized recipients through an AMM after issuer revocation
medium
An attacker will create unbacked ledger objects and impose irreversible reserve deficits on the protocol
medium
Sender will make valid confidential transfers undecryptable for recipients
medium
Vault sponsor reserve permanently locked — SponsorshipTransfer is silently blocked by ValidVault invariant on every vault SLE
Mar '26
high
Liquidity mining reward manager will permanently lock pool rewards for all users as arithmetic overflow occurs during reward calculation
high
Liquidation uses EMA for trigger but spot for seizure, enabling over-seizure and bad debt creation
medium
Depositors will bypass the deposit cap causing excess protocol exposure due to double subtraction of `cash_reserve`
medium
Rate limiter cross-segment deposits do not offset withdrawals, causing legitimate withdrawals to revert