Skip to content

Actions: code-423n4/2024-07-karak-findings

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
1,124 workflow runs
1,124 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

Vault staking request to a DSS cannot be canceled, putting user funds at risk in the case of a malicios DSS Repo Moderator #49: Issue #26 labeled by c4-bot-3
July 30, 2024 11:02 13s
July 30, 2024 11:02 13s
Vault staking request to a DSS cannot be canceled, putting user funds at risk in the case of a malicios DSS Repo Moderator #48: Issue #26 labeled by c4-bot-3
July 30, 2024 11:02 14s
July 30, 2024 11:02 14s
Donation to vault will negate slippage control in deposit function Repo Moderator #47: Issue #25 labeled by c4-bot-10
July 30, 2024 10:41 16s
July 30, 2024 10:41 16s
Donation to vault will negate slippage control in deposit function Repo Moderator #46: Issue #25 labeled by c4-bot-10
July 30, 2024 10:41 14s
July 30, 2024 10:41 14s
Slashing limit will be bypassed if any staker (finish) redeems their tokens in the SLASHING_VETO_WINDOW which will result in other vault's stakers facing more assets slash Repo Moderator #45: Issue #24 labeled by c4-bot-1
July 30, 2024 10:19 13s
July 30, 2024 10:19 13s
Slashing limit will be bypassed if any staker (finish) redeems their tokens in the SLASHING_VETO_WINDOW which will result in other vault's stakers facing more assets slash Repo Moderator #44: Issue #24 labeled by c4-bot-1
July 30, 2024 10:19 14s
July 30, 2024 10:19 14s
Wrong input parameter passed to DSS hook function - msg.sender instead of operator Repo Moderator #43: Issue #23 labeled by c4-bot-6
July 30, 2024 09:54 16s
July 30, 2024 09:54 16s
Wrong input parameter passed to DSS hook function - msg.sender instead of operator Repo Moderator #42: Issue #23 labeled by c4-bot-6
July 30, 2024 09:54 13s
July 30, 2024 09:54 13s
QA Report Repo Moderator #41: Issue #22 labeled by c4-bot-7
July 30, 2024 08:18 17s
July 30, 2024 08:18 17s
QA Report Repo Moderator #40: Issue #22 labeled by c4-bot-7
July 30, 2024 08:18 15s
July 30, 2024 08:18 15s
Operator can DOS DSS's unregistrationHook function by specifying arbitrary unregistrationHookData while not reverting its own Core.unregisterOperatorFromDSS function call Repo Moderator #39: Issue #21 labeled by c4-bot-5
July 30, 2024 08:01 12s
July 30, 2024 08:01 12s
Operator can DOS DSS's unregistrationHook function by specifying arbitrary unregistrationHookData while not reverting its own Core.unregisterOperatorFromDSS function call Repo Moderator #38: Issue #21 labeled by c4-bot-5
July 30, 2024 08:01 14s
July 30, 2024 08:01 14s
DSS cannot force jailed operator to unallocate from such DSS Repo Moderator #37: Issue #20 labeled by c4-bot-3
July 30, 2024 07:57 14s
July 30, 2024 07:57 14s
DSS cannot force jailed operator to unallocate from such DSS Repo Moderator #36: Issue #20 labeled by c4-bot-3
July 30, 2024 07:57 17s
July 30, 2024 07:57 17s
Every operator is unexpectedly DOS'ed from staking to a DSS and possible leveraging for at least 9 days Repo Moderator #35: Issue #19 labeled by c4-bot-5
July 30, 2024 07:53 14s
July 30, 2024 07:53 14s
Every operator is unexpectedly DOS'ed from staking to a DSS and possible leveraging for at least 9 days Repo Moderator #34: Issue #19 labeled by c4-bot-5
July 30, 2024 07:53 15s
July 30, 2024 07:53 15s
DSS can force operator to pay much more for gas than necessary when calling DSS's hooks Repo Moderator #33: Issue #18 labeled by c4-bot-6
July 30, 2024 07:47 15s
July 30, 2024 07:47 15s
DSS can force operator to pay much more for gas than necessary when calling DSS's hooks Repo Moderator #32: Issue #18 labeled by c4-bot-6
July 30, 2024 07:47 15s
July 30, 2024 07:47 15s
When malicious behavior occurs and DSS requests slashing against vault during 2 day period after SLASHING_WINDOW of 7 days is passed after staker initiates a withdrawal, token amount to be slashed is calculated to be higher than what it should be Repo Moderator #31: Issue #17 labeled by c4-bot-2
July 30, 2024 07:37 15s
July 30, 2024 07:37 15s
When malicious behavior occurs and DSS requests slashing against vault during 2 day period after SLASHING_WINDOW of 7 days is passed after staker initiates a withdrawal, token amount to be slashed is calculated to be higher than what it should be Repo Moderator #30: Issue #17 labeled by c4-bot-2
July 30, 2024 07:37 13s
July 30, 2024 07:37 13s
Slashed amount of vault's underlying token's underlying asset can be unfairly higher than what DSS should be able to slash when such underlying token is a token that has balance changes outside of transfers Repo Moderator #29: Issue #16 labeled by c4-bot-9
July 30, 2024 06:47 14s
July 30, 2024 06:47 14s
Slashed amount of vault's underlying token's underlying asset can be unfairly higher than what DSS should be able to slash when such underlying token is a token that has balance changes outside of transfers Repo Moderator #28: Issue #16 labeled by c4-bot-9
July 30, 2024 06:47 15s
July 30, 2024 06:47 15s
Delayed Slashing Window and Lack of Transparency for Pending Slashes Could Lead to Loss of Funds Repo Moderator #27: Issue #15 labeled by c4-bot-8
July 30, 2024 03:17 12s
July 30, 2024 03:17 12s
Delayed Slashing Window and Lack of Transparency for Pending Slashes Could Lead to Loss of Funds Repo Moderator #26: Issue #15 labeled by c4-bot-8
July 30, 2024 03:17 17s
July 30, 2024 03:17 17s
QA Report Repo Moderator #25: Issue #14 labeled by code4rena-admin
July 30, 2024 03:13 16s
July 30, 2024 03:13 16s
ProTip! You can narrow down the results and go further in time using created:<2024-07-30 or the other filters available.