Skip to content

Issues: sherlock-audit/2024-11-tally

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

11 Open 1 Closed
11 Open 1 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Frequently bumping to increase earning power may eat depositor rewards Low/Info A Low/Info severity issue.
#42 opened Dec 11, 2024 by CergyK
2
Earning power is close to type(uint96).max, any upscaling can brick functionality Low/Info A Low/Info severity issue.
#41 opened Dec 7, 2024 by CergyK
2
Unused import DelegationSurrogateVotes Low/Info A Low/Info severity issue.
#40 opened Dec 7, 2024 by CergyK
2
Oracle begins in stale state due to uninitialized lastOracleUpdateTime Low/Info A Low/Info severity issue.
#39 opened Dec 7, 2024 by CergyK
2
Increasing delegate eligibility score will make some delegatees instantly bumpable (skipping grace period) Low/Info A Low/Info severity issue.
#37 opened Dec 7, 2024 by CergyK
1
Deposits can be maliciously bumped when oracle becomes stale/paused Low/Info A Low/Info severity issue.
#36 opened Dec 7, 2024 by jokrsec
2
Increasing the earning power of a deposit may fail in certain cases Low/Info A Low/Info severity issue.
#35 opened Dec 7, 2024 by jokrsec
3
_calculateTotalEarningPower formula can be simplified Low/Info A Low/Info severity issue.
#34 opened Dec 6, 2024 by CergyK
2
_requestedTip is not deduced from depositor rewards as intended High A High severity issue.
#33 opened Dec 6, 2024 by CergyK
2
GovernanceStakerOnBehalf nonces can be consumed for any address by any depositor Low/Info A Low/Info severity issue.
#32 opened Dec 6, 2024 by CergyK
4
Updating earning power for deposit without checkpointing rewards can lead to draining of all rewards High A High severity issue.
#31 opened Dec 6, 2024 by CergyK
4
ProTip! Mix and match filters to narrow down what you’re looking for.