Payouts
Top 25
Top 50
All
Sherlock
Code4rena
CodeHawks
Mar '25
Feb '25
high
Multiple issues from unnecessary balance increase calculation in DebtToken.mint
high
Double Usage Index Scaling in StabilityPool Liquidation Inflates Required CRVUSD Balance
high
Attackers can double voting power and veToken amount by locking and increasing
medium
`MAX_TOTAL_SUPPLY` Bypass in `veRAACToken` via `increase()` Function
medium
Missing Boost Balance and other parameters Update in veRAACToken Functions. Incomplete Boost State Updates Result in Inaccurate Voting Power and Reward Distribution
medium
Incorrect utilization rate forces protocol to issue maximum rewards indefinitely
medium
LendingPool deposits do not work with CurveVault due to lack of funds
medium
There is no logic checking for RAACNFT price staleness before minting it
medium
LendingPool.getUserDebt returns outdated value and can lead to liquidation failure
medium
Missing Boost State Update in extend() and withdraw()
low
Limited veRaac Token Supply Triggers DoS, Hampering Proper Governance Participation.
low
Incorrect Emission Rate Calculation in RAACMinter Creates Liquidity Bootstrapping Risk with Zero Deposits
Jan '25
Dec '24