CVE-2020-13048

This CVE entry is rejected/not used, per the Initial Description.

CVE-2020-13045

CVE-2020-13045 is rejected/not used; this CVE entry does not represent an active vulnerability.

CVE-2020-13042

CVE-2020-13042 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2020-13036

CVE-2020-13036 is rejected/not used and does not represent an active vulnerability entry.

CVE-2020-13032

CVE-2020-13032 entry is rejected/not used and does not represent an active vulnerability.

CVE-2020-13031

CVE-2020-13031 is rejected and does not represent an active vulnerability entry.

CVE-2020-13029

CVE-2020-13029 is rejected and does not represent an active vulnerability entry.

CVE-2020-13027

CVE-2020-13027 entry is rejected/not used per initial description.

CVE-2020-13016

This CVE-2020-13016 entry is rejected and does not represent an active vulnerability entry.

CVE-2020-13013

The CVE-2020-13013 entry is rejected/not used and does not represent an active vulnerability.

CVE-2020-12958

CVE-2020-12958 is rejected/not used per the initial description.

CVE-2020-12945

CVE-2020-12945 entry is rejected/not used per description.

CVE-2020-12943

CVE-2020-12943 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2020-12907

CVE-2020-12907 is rejected/not used and does not represent an active vulnerability entry.

applyCover() Does Not Enforce Index Market Lock

Handle leastwood Vulnerability details Impact The applyCover function is called by the insurance pool owner and intends to store data related to an insurance incident. Upon function execution, applyCover iterates over all available index markets and calls lock, denying all deposits and withdrawal...

[WP-H36] Admin of the index pool can withdrawCredit() after applyCover() to avoid taking loss for the compensation paid for a certain pool

Handle WatchPug Vulnerability details In the current implementation, when an incident is reported for a certain pool, the index pool can still withdrawCredit from the pool, which in the best interest of an index pool, the admin of the index pool is preferred to do so. This allows the index pool t...

[WP-H27] IndexTemplate.sol#compensate() will most certainly fail

Handle WatchPug Vulnerability details Root Cause Precision loss while converting between the amount of shares and the amount of underlying tokens back and forth is not handled properly. uint256 shortage; if totalLiquidity amount //Insolvency case shortage = amount - value; uint256 cds =...

Unbounded iteration over all pools

Handle Dravee Vulnerability details Impact The transactions could fail if the array get too big and the transaction would consume more gas than the block limit. This will then result in a denial of service for the desired functionality and break core functionality. Proof of Concept Tools Used VS...

System Debt Is Not Handled When Insurance Pools Become Insolvent

Handle leastwood Vulnerability details Impact If an incident has occurred where an insurance policy is to be redeemed. The market is put into the MarketStatus.Payingout mode where the insurance.insured account is allowed to redeem their cover and receive a payout amount. Upon paying out the...

the first depositor to a pool can drain all users

Handle danb Vulnerability details if there is no liquidity in the pool, the first deposit determines the total liquidity, if the amount is too small the minted liquidity for the next liquidity providers will round down to zero. Impact An attacker can steal all money from liquidity providers. Proo...