Payouts
3rd Places
Top 10
Top 25
All
Sherlock
Code4rena
Cantina
CodeHawks
May '25
high
Apr '25
medium
medium
medium
Mar '25
Feb '25
Jan '25
medium
Dec '24
medium
Incorrect Total Assets Calculation in _harvestAndReport Leading to Share Value Manipulation and Irredeemable Assets
medium
not adding `claimable` balance to the total assets in `_harvestAndReport` can cause losses.
medium
Inflated `totalAssets` in `StrategyMainnet`, `StrategyArb`, and `StrategyOp` Contracts
low
Old router retains token allowance after update
high
Oct '24
high
high
medium
Sep '24
medium
Aug '24
high
TokenManager - Unlimited withdraw
high
Taker of bid offer will loss assets without any benefit if he calls the DeliveryPlace::settleAskMaker() for partial settlement.
high
Native token withdrawal fails until manually approved
high
`DeliveryPlace::settleAskTaker` Has Incorrect Access Control
high
Formulaic Error Rounds Down Causing Total Loss Of Funds For Bid Takers During Abort
high
The `DeliveryPlace::settleAskTaker()` function mistakenly uses `makerInfo.tokenAddress` to update the `TokenBalanceType.PointToken` in the `userTokenBalanceMap` mapping, leading to a critical error.
high
Fund Withdrawal Flaw in preMarket Allows Users to Avoid Settlement Obligations
low
`listOffer` Unsafely References Fungible Identifiers
low
3 `OfferStatus` are never used, and code seems to have contradicting intentions
Jun '24