
Payouts

3rd Places

Top 10

Top 25
All
Sherlock
Code4rena
Cantina
CodeHawks
Aug '25
high
CREATE2 address of the uniswap pair used by `LaunchPad` does not match address of pair deployed by `GTELaunchpadV2PairFactory`
high
Total reward shares for token can reach zero after unlocking, causing `GTELaunchpadV2Pair` to be bricked
high
Risk of Gas DoS due to Looping
medium
Pair pre-creation disables Launchpad rewards hooks leading to no fees accrued or distributed
medium
Launchpad slippage is not enforced properly during token graduation
medium
`LaunchToken` transfers cause staking rewards to be lost to the `LaunchPad`
medium
Reduce-only orders can be used to inflate `quoteOI` and DoS the orderbook
medium
Incorrect Removal Of Asset In UpdateAccount Due To Wrong Implementation in _movePop
Jul '25
Jun '25
Mar '25
Feb '25
high
Delegation Boost Not Usable by Delegatees
high
ZENO Token Redemption Returns Negligible USDC Amount Compared to Purchase Price
high
Incorrect decimal handling in `Auction::buy()` leads to massive overpayment for ZENO tokens
high
RAACNFT mint function receives funds to address(this) but has no way of withdrawing them
high
`BaseGauge` users can claim rewards without staking
high
Ineffective Time-Weighted Average Implementation in Fee Distribution
medium
[H-2] Lack of Emergency Pause in `BaseGauge::stake` and `BaseGauge::withdraw
medium
Timelock Controller Retains Canceled Proposals, Enabling Unauthorized Execution and severe Governance Voting manipulation.
medium
Incorrect DebtToken totalSupply Scaling Breaks Interest Rate Calculations
medium
Using balanceOf Instead of Voting Power
medium
Owner Can Change Vote Results After Voting Ends by Updating Quorum Numbers for New proposals
medium
Workingsupply would always be overwritten in boostcontroller.sol impacting reward calculations
medium
Emergency revoke in RAACReleaseOrchestrator will freeze revoked RAAC tokens in orchestrator
medium
Time-skew Attack in RWAGauge Weight Calculations Through Precision Gaming
medium
RAACToken burns less tokens than expected when feeCollector is unset
medium
Incorrect boost calculation in `BoostController#_calculateBoost()` can be exploited to gain an unfair advantage in reward distribution
medium
Boost Delegation Doesn’t Work and Leaves Boost Power Unused
medium
closeLiquidation within LendingPool does not allow partial repayments, which can cause massive losses to users within edge case
medium
Emission rate can be manipulated
low
Missing TokenURI Function in RAACNFT contract Makes All NFTs Look the Same and Unusable
Jan '25
high
medium