Skip to content

Issues: sherlock-audit/2024-11-teller-finance-update-judging

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

73 Open 1 Closed
73 Open 1 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Brisk Sapphire Chipmunk - Missing ERC1155 Token ID Handling in Withdrawal Logic Leading to inability to withdraw collateral
#73 opened Dec 10, 2024 by sherlock-admin2
Wild Chili Nuthatch - Unchecked repayLoanCallback Execution
#72 opened Dec 10, 2024 by sherlock-admin4
Dandy Caramel Tortoise - EMI calculation is flawed Won't Fix The sponsor confirmed this issue will not be fixed
#71 opened Dec 10, 2024 by sherlock-admin3
Petite Pewter Orangutan - TellerV2::constructor is not calling __Pausable_init() which will interrupt contract's pause functionality
#70 opened Dec 10, 2024 by sherlock-admin2
Petite Pewter Orangutan - TellerV2::setProtocolPausingManager missing access control modifier
#69 opened Dec 10, 2024 by sherlock-admin4
Petite Pewter Orangutan - LenderCommitmentGroupShares missing msg.sender on constructor's Ownable()
#68 opened Dec 10, 2024 by sherlock-admin3
Restless Magenta Mallard - Liquidator can acquire collateral assets for free or significantly less.
#67 opened Dec 10, 2024 by sherlock-admin2
Scrawny Sapphire Baboon - ERC2771ContextUpgradeable Missing Storage Gap
#66 opened Dec 10, 2024 by sherlock-admin4
Cuddly Ginger Tadpole - Fetching principal amount in active loans can revert if there were partial repayments previously
#65 opened Dec 10, 2024 by sherlock-admin3
Expert Wool Armadillo - Missing events/timelocks for admin only functions that change critical parameters
#64 opened Dec 10, 2024 by sherlock-admin2
Wild Chili Nuthatch - Implementing Front-Running Protection in Smart Contracts: Commit-Reveal and Time-Based Lock Mechanisms
#63 opened Dec 10, 2024 by sherlock-admin4
Dandy Caramel Tortoise - Incorrect messge sender in case base _trustedForwarder is used
#62 opened Dec 10, 2024 by sherlock-admin3
Clever Mocha Pheasant - Unprotected Price Oracle Reading Enables Single-Block Price Manipulation
#61 opened Dec 10, 2024 by sherlock-admin2
Dandy Caramel Tortoise - marketForwarder for a specific market can spoof a user all markets
#60 opened Dec 10, 2024 by sherlock-admin4
Clever Mocha Pheasant - Share Preparation Time Lock Bypass Through State Overwrite
#59 opened Dec 10, 2024 by sherlock-admin3
Clever Mocha Pheasant - Incomplete Token Permission Validation in Collateral Checks
#58 opened Dec 10, 2024 by sherlock-admin2
Clever Mocha Pheasant - Incomplete Validation State in Collateral Balance Checks
#57 opened Dec 10, 2024 by sherlock-admin4
Clever Mocha Pheasant - Missing Escrow Address Storage in Proxy Deployment Function
#56 opened Dec 10, 2024 by sherlock-admin3
Petite Pewter Orangutan - No access control on setCollateralEscrowBeacon
#55 opened Dec 10, 2024 by sherlock-admin2
Bubbly Inky Sawfish - The totalPrincipalTokensRepaid and totalInterestCollected may not be updated even when funds are already transferred Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#54 opened Dec 10, 2024 by sherlock-admin4
1
Joyful Olive Meerkat - A borrower, lender, or liquidator may be unable to withdraw collateral assets if the gas limit is exceeded.
#53 opened Dec 10, 2024 by sherlock-admin3
Dandy Caramel Tortoise - Sudden drop/increase in share value allows users who monitor to gain at the expense of the others
#52 opened Dec 10, 2024 by sherlock-admin2
Dandy Caramel Tortoise - Tokens that revert of zero value transfers can cause reverts on liquidation Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#51 opened Dec 10, 2024 by sherlock-admin4
1
Dandy Caramel Tortoise - Lack of sequencer uptime check can cause lenders to loose assets in L2
#50 opened Dec 10, 2024 by sherlock-admin3
Dandy Caramel Tortoise - ERC-777 reentrancy will allow an attacker to permenantly cause some assets to be non-loanable in a LenderGroup
#49 opened Dec 10, 2024 by sherlock-admin2
ProTip! no:milestone will show everything without a milestone.