Payouts
Top 25
Top 50
All
Sherlock
Apr '23
high
[M-02] Missed modifier onlyTellerV2 in reinitialize function (setCollateralEscrowBeacon)
high
[H-02] Attacker can steal all approved lender's assets without lost of collateral over updateCommitment() function.
high
[H-03] Attacker can steal all approved lender's assets without lost of collateral over commitCollateral() fuction.
medium
[H-01] MarketOwner can steal collateral from all bids.
medium
[H-05] Owner of protocol could steal future minted nft's.
medium
[M-05] Protocol does not support fee/rebase ERC20 tokens.
Mar '23
Feb '23