Skip to content

Actions: code-423n4/2024-07-loopfi-findings

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
6,617 workflow runs
6,617 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

SwapAction.sol#balancerSwap does not support native ETH as input token. Repo Moderator #6567: Issue #70 labeled by C4-Staff
November 4, 2024 21:54 1m 4s
November 4, 2024 21:54 1m 4s
ChefIncentivesController caches endRewardTime, which is not required, and may cause issues during reward update. Repo Moderator #6566: Issue #75 labeled by C4-Staff
November 4, 2024 21:54 1m 4s
November 4, 2024 21:54 1m 4s
PositionAction4626.sol#_onWithdraw should withdraw from position CDPVault position instead of address(this). Repo Moderator #6565: Issue #81 labeled by C4-Staff
November 4, 2024 21:54 1m 5s
November 4, 2024 21:54 1m 5s
PositionAction.sol#_deposit incorrectly checks auxSwap.assetIn should be equal to collateralParams.targetToken. Repo Moderator #6564: Issue #85 labeled by C4-Staff
November 4, 2024 21:54 2s
November 4, 2024 21:54 2s
PositionAction.sol#onCreditFlashLoan may have leftover tokens after conducting leverParams.auxSwap. Repo Moderator #6563: Issue #87 labeled by C4-Staff
November 4, 2024 21:54 2s
November 4, 2024 21:54 2s
Emission schedule is not followed Repo Moderator #6562: Issue #104 labeled by C4-Staff
November 4, 2024 21:54 2s
November 4, 2024 21:54 2s
Discrepency b/w the lastRewadTime and the lastAllPoolUpdate can allow for incorrect reward distribution to pools if registerRewardDeposit deposits less assets Repo Moderator #6561: Issue #108 labeled by C4-Staff
November 4, 2024 21:54 3s
November 4, 2024 21:54 3s
Usage of lastEligibleStatus can cause user to miss out on rewards on manualStopEmissionsFor invocation Repo Moderator #6560: Issue #121 labeled by C4-Staff
November 4, 2024 21:54 3s
November 4, 2024 21:54 3s
bug in claim allows users who are disqualified to claim their previously earned emissions Repo Moderator #6559: Issue #123 labeled by C4-Staff
November 4, 2024 21:54 3s
November 4, 2024 21:54 3s
BalancerOracle::update() can return stale price Repo Moderator #6558: Issue #124 labeled by C4-Staff
November 4, 2024 21:54 2s
November 4, 2024 21:54 2s
Rewards may be spread out among the **wrong time period** due to the way the protocol calculates it Repo Moderator #6557: Issue #133 labeled by C4-Staff
November 4, 2024 21:54 2s
November 4, 2024 21:54 2s
PoolV3#repayCreditAccount() use incorrect share converting function to calculate profit and loss Repo Moderator #6556: Issue #150 labeled by C4-Staff
November 4, 2024 21:54 3s
November 4, 2024 21:54 3s
Incorrect address is used as spender for ERC20 permit signature verification Repo Moderator #6555: Issue #152 labeled by C4-Staff
November 4, 2024 21:54 2s
November 4, 2024 21:54 2s
lastRPS could be set to 0 accidentally Repo Moderator #6554: Issue #154 labeled by C4-Staff
November 4, 2024 21:53 2s
November 4, 2024 21:53 2s
The debt in EligibilityDataProvider::requiredUsdValue() needs to be converted into USD; otherwise, it is not a correct value comparison. Repo Moderator #6553: Issue #156 labeled by C4-Staff
November 4, 2024 21:53 2s
November 4, 2024 21:53 2s
Users of a vault can steal other user's rewards when one vault's lastRewardTime differs from another vault's lastRewardTime Repo Moderator #6552: Issue #158 labeled by C4-Staff
November 4, 2024 21:53 2s
November 4, 2024 21:53 2s
In PositionActionPendle::_onDecreaseLever, tokenOut is implemented incorrectly. Repo Moderator #6551: Issue #160 labeled by C4-Staff
November 4, 2024 21:53 1s
November 4, 2024 21:53 1s
Honest users could be permanently DOS'd from withdrawing their vested tokens/rewards Repo Moderator #6550: Issue #181 labeled by C4-Staff
November 4, 2024 21:53 2s
November 4, 2024 21:53 2s
Because of the Asset:Share 1:1 Conversion, if Vault Incur a Loss, the Last User to Withdraw Will Take The Entire Loss Repo Moderator #6549: Issue #186 labeled by C4-Staff
November 4, 2024 21:53 2s
November 4, 2024 21:53 2s
In CDPVault::liquidatePositionBadDebt(), the calculation of loss is incorrect. Repo Moderator #6548: Issue #190 labeled by C4-Staff
November 4, 2024 21:53 2s
November 4, 2024 21:53 2s
PositionAction.decreaseLever() fails to consider the loan fee in Flashlender when calculating loanAmount, as a result, the functionanlity will not work when protocolFee != 0. Repo Moderator #6547: Issue #191 labeled by C4-Staff
November 4, 2024 21:53 2s
November 4, 2024 21:53 2s
Incorrect calculation of newCumulativeIndex in function calcDecrease Repo Moderator #6546: Issue #201 labeled by C4-Staff
November 4, 2024 21:53 2s
November 4, 2024 21:53 2s
WhenNotPaused modifier in the CDPVault can be bypassed by users Repo Moderator #6545: Issue #204 labeled by C4-Staff
November 4, 2024 21:53 3s
November 4, 2024 21:53 3s
DOS attack to SwapAction.transferAndSwap() when using an ERC20 permit transferFrom. Repo Moderator #6544: Issue #205 labeled by C4-Staff
November 4, 2024 21:53 3s
November 4, 2024 21:53 3s
Lack of Slippage Control in AuraVault::deposit and AuraVault::mint Functions Can Lead to Unexpected Financial Losses for Users Repo Moderator #6543: Issue #215 labeled by C4-Staff
November 4, 2024 21:53 2s
November 4, 2024 21:53 2s