Payouts
1st Places
3rd Places
Top 10
All
Sherlock
Mar '25
Jan '25
Dec '24
high
An attacker could potentially drain the entire pool balance, including all user funds, from the `OracleLess` contract.
high
Missing Validation of recipient in `createOrder` Allows Attacker to back-Run Approvals, Resulting in Slippage Manipulation and Complete Fund Loss
high
Order ID Collision in `Bracket.sol` Contract Leads to Overwriting of Bracket Orders
medium
Improper Stale Price Validation in `PythOracle` Contract Valid Data
medium
Incorrect Take-Profit Logic in `checkInRange` for direction = true
Nov '24
Oct '24
Aug '24
May '24
Apr '24
Feb '24