
Payouts

2nd Places

Top 10

Top 25
All
Sherlock
Cantina
Mar '26
high
Multiply-before-divide overflow in reward release calculation permanently freezes all lending operations
medium
`deposit_limit_breached` double-subtracts `cash_reserve`, allowing deposits to exceed the protocol's configured deposit cap
medium
Lazy Tracker Creation Allows Admin to Confiscate Vested Rewards from Passive Users via `close_pool_reward`
medium
Debt-Side ADL Trigger Check Uses Whole-Market Reserve Debt Instead of Group-Scoped Debt, Enabling ADL Against Non-Breaching Groups
Nov '25
Aug '25
high
high
high
medium