Payouts
Top 10
Top 25
Top 50
All
Sherlock
Code4rena
CodeHawks
Apr '25
Mar '25
Feb '25
high
`BaseGauge` users can claim rewards without staking
high
Multiple issues from unnecessary balance increase calculation in DebtToken.mint
high
RToken's transfer function lead to loss of funds due to incorrect math
high
RToken is Not Interest Bearing Due to Broken Liquidity Index Calculation
high
Incorrect Debt Scaling Leading to Protocol Solvency Risk
high
Attackers can double voting power and veToken amount by locking and increasing
medium
Incorrect DebtToken totalSupply Scaling Breaks Interest Rate Calculations
medium
Multiple Critical Calculation And Logic Errors in `RToken::mint/burn` Function
medium
Workingsupply would always be overwritten in boostcontroller.sol impacting reward calculations
medium
Emergency revoke in RAACReleaseOrchestrator will freeze revoked RAAC tokens in orchestrator
medium
Missing Boost State Update in extend() and withdraw()
medium
Permanent boost inflation through delegation removal in Boostcontroller.sol
medium
[L-1] Inaccurate boost calculations in `veRAACToken` due to wrong input parameter
medium
RAACToken burns less tokens than expected when feeCollector is unset
medium
Flawed Boost Multiplier Calculation Always Yields Maximum Boost
medium
Inconsistent Fee Collector Address Validation in RAACMinter: Denial of Service for Disabling Fee Collection
low
Missing Pause Functionality in veRAACToken Contract Can Be Abused When Emergency Withdrawal Mechanism Is Activated
low
`DebtToken::burn`'s Return Values are wrong
low
Wrong event emitted in `LendingPool::_repay`
low
`Auction::checkAuctionEnded()` function fails to handle early auction completion when all ZENO tokens are sold, potentially blocking critical post-auction processes
Nov '24
Oct '24
Sep '24
Aug '24