Payouts
Top 10
Top 25
Top 50
All
Sherlock
Aug '24
high
Debt rates will be wrongly set when debt is repaid
high
Borrow rates are easily manipulatable due to `nextDebtShares` being set to a wrong value
high
Treasury fee shares are removed from `totalSupply.supplyShares`, causing withdrawals to fail
high
Borrowers cannot be fully liquidated, due to `executeLiquidationCall` not converting shares into assets
high
The liquidation protocol fee is not reduced from the total supply shares, allowing liquidated borrowers to steal from other users
high
`CuratedVault` depositors are able to get more shares than intended by the protocol, stealing from other depositors
high
`PositionBalanceConfiguration`'s `getSupplyBalance` and `getDebtBalance` are implemented incorrectly causing numerous criticial issues
medium
Treasury fees are not considered when calculating interest rates after withdrawals
medium
`reallocate` reverts if all pool's assets are reallocated
medium
`withdrawable` may return a too high amount, causing a revert and preventing users from withdrawing their assets from curated vaults
Jul '24
high
`repayBorrowWithERC20Permit` supplies incorrect interest value to `_repayBorrowFresh`
high
`debtWriteOff` incorrectly reduces `_totalStaked`, causing rewards to be inaccurate
high
All tokens can be stolen from `VouchFaucet.sol`
medium
Any user can claim an unlimited amount of vouch in `VouchFaucet.sol`
medium
`onERC1155BatchReceived` can be called by any address
May '24
Apr '24
Sep '23
Jul '23