Payouts
2nd Places
3rd Places
Top 10
All
Sherlock
Jan '25
Dec '24
high
updateDownsideProtected() has no access control mechanism
high
`calculateCumulativeRate()` is called in liquidate, but updating `lastEventTime` is nowhere to be seen
high
Interest rate accrued from liquidation of debt can't be withdrawn
high
Repaying the loan and withdrawing collateral doesn't check the validity of the option
high
`withdrawUserWhoNotOptedForLiq()` retains part of the accrued usdA reward, but it can't be claimed
medium
Resetting `lastEventTime` before calling `calculateCumulativeRate()` is problematic
medium
Not updating `lastEthprice` in `borrowing::depositTokens()` leads to a stale eth price
medium
`executeSetterFunction()` lacks any type of access control
Nov '24
Oct '24
Sep '24