Calling withdraw on a delegated amount of WETH doesn't subtract from totalWethDelegated

Lines of code Vulnerability details Impact The contract's WETH amount gets permanently bricked. Proof of Concept A user can call addToDelegate and give WETH, that other people can use for bonding with their rDPX in exchange for a certain percentage appointed by the delegatee. Delegate memory...

Calculating slippage from price oracle is not accurate

Lines of code Vulnerability details Impact calculating slippage using oracle prices will lead to inaccurate slippage values , due to this swaps will fail or execute with higher slippage. Proof of Concept In curveSwap function of RdpxV2Core contract slippage is being calculated using oracles price...

Attacker can steal funding yield from the PerpetualAtlanticVaultLP contract atomically

Lines of code Vulnerability details Impact An attacker is able to atomically steal large amounts of the funding yield from the PerpetualAtlanticVaultLP contract. This is due to the fact that the deposit function of the PerpetualAtlanticVaultLP contract will first issue the attacker shares based o...

Overwriting rdpxAmount Without Checks

Lines of code Vulnerability details Impact The decreaseAmount function, specifically the line bondsbondId.rdpxAmount = amount;. This vulnerability allows overwriting the rdpxAmount without any checks or backups, which can result in irreversible data loss. function decreaseAmount uint256 bondId,...

When user unbonds before transcoder calls reward, then cumulativeRewardFactor for the round is less than it should be

Lines of code Vulnerability details Impact When user unbonds before transcoder calls reward, then cumulativeRewardFactor for the round is less than it should be. As result other delegators loose rewards. Proof of Concept Each round transcoder can call reward function in order to claim reward toke...

Improperly tracking asset reserve for WETH

Lines of code Vulnerability details Impact Function RdpxV2Corewithdraw lets delegate owners withdraw their unused WETH. However, withdrawn amount is not deducted from totalWethDelegated, which causes WETH asset reserve tracked improperly. The impacts could be: 1. Function sync gets reverted when...

DoS sending WETH from RdpxV2Core to PerpetualAtlanticVault via provideFunding()

Lines of code Vulnerability details Impact The amount of reserveAssetreservesIndex"WETH".tokenBalance can be set to 0, by first calling addToDelegate with the current value of reserveAssetreservesIndex"WETH".tokenBalance, then calling withdraw to withdraw all the deposited weth and then calling...

The Rdpx V2 Core contract functionality blocking

Lines of code Vulnerability details Impact The RdpxV2Core contract functionality can be blocked as long as the contract WETH balance is less than totalWethDelegated. This can happen even without malicious activities. Proof of Concept The sync function of the RdpxV2Core contract has a special...

Array Mismatch in RdpxV2Core.sol

Lines of code Vulnerability details Impact reserveTokens and reserveAsset are not synced because reserveTokens was not initialized in the constructor. Proof of Concept The RdpxV2Core.sol contract stores the reserve token information and also uses another array to only track the reserve token...

CVE-2018-4343

creationtimestamp| type| source ---|---|--- 2023-09-05 20:16:41+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/205...

CVE-2018-4411

creationtimestamp| type| source ---|---|--- 2023-09-05 20:16:41+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/205...

CVE-2018-4330

creationtimestamp| type| source ---|---|--- 2023-09-05 20:16:41+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/205...

CVE-2018-20305

creationtimestamp| type| source ---|---|--- 2023-09-05 20:13:03+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/138...

CVE-2023-40743

creationtimestamp| type| source ---|---|--- 2023-09-05 18:17:06+00:00| published-proof-of-concept| https://t.me/cibsecurity/69856...

CVE-2023-40031

creationtimestamp| type| source ---|---|--- 2023-09-05 07:29:58+00:00| published-proof-of-concept| https://t.me/dilagrafie/3179 2023-09-09 01:18:57+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5104 2023-09-10 07:16:49+00:00| published-proof-of-concept| https://t.me/cKure/11541...

CVE-2023-41538

creationtimestamp| type| source ---|---|--- 2023-09-05 04:35:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5084 2023-09-05 06:48:45+00:00| published-proof-of-concept| https://t.me/codeb0ss/1117 2024-07-23 12:40:21+00:00| published-proof-of-concept|...

Password-stealing Chrome extension smuggled on to Web Store

Researchers at the University of Wisconsin-Madison have demonstrated that Chrome browser extensions can steal passwords from the text input fields in websites, even if the extension is compliant with Chrome's latest security and privacy standard, Manifest V3. To prove it, they created a proof of...

CVE-2023-41054

creationtimestamp| type| source ---|---|--- 2023-09-04 22:21:27+00:00| published-proof-of-concept| https://t.me/cibsecurity/69809...

CVE-2023-41055

creationtimestamp| type| source ---|---|--- 2023-09-04 22:21:26+00:00| published-proof-of-concept| https://t.me/cibsecurity/69808...

heap-buffer-overflow in function vim_regsub_both

Description heap-buffer-overflow in vimregsubboth at regexp.c:2482 Version git log commit e073a8b79f1d3398b27f35b7920746b564a169e9 HEAD - master, origin/master, origin/HEAD Proof of Concept ./vim -u NONE -i NONE -n -m -X -Z -e -s -S vimregsubbothpoc -c :qa! helplang=en readonly...