
Payouts

Top 10

Top 25

Top 50
All
Sherlock
Sep '25
Findings not publicly available for private contests.
Jul '25
Jun '25
high
An attacker will steal/deny refunds from legitimate users
high
Attacker will steal funds from the contract by exploiting parameter inconsistency
medium
Missing Fee Deduction in Token Swaps Will Cause Fee Calculation Inconsistencies
medium
The GatewaySend contract will not properly handle ETH refunds in onRevert function
medium
Attacker will drain protocol funds from unclaimed refunds