EUVD-2018-5078

Malware in sbrugna...

EUVD-2018-5672

Malware in sbrugna...

EUVD-2018-5545

Malware in sbrugna...

EUVD-2018-5473

Malware in sbrugna...

EUVD-2018-5586

Malware in sbrugna...

EUVD-2018-5017

Malware in sbrugna...

EUVD-2018-5430

Malware in sbrugna...

EUVD-2018-5076

Malware in sbrugna...

EUVD-2018-5471

Malware in sbrugna...

EUVD-2018-5123

Malware in sbrugna...

EUVD-2018-5492

Malware in sbrugna...

EUVD-2018-5496

Malware in sbrugna...

EUVD-2018-5652

Malware in sbrugna...

CVE-2018-13130

Bitotal TFUND is a smart contract running on Ethereum. The mintTokens function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

CVE-2018-13132

Spadeico is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

CVE-2018-13131

SpadePreSale is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

Missing deadline checks

Lines of code Vulnerability details Consider addings implementation to handle the expiration of the transaction for additional security. To implement a transaction expiration mechanism in the emergencyWithdraw add a timestamp check to ensure that the transaction is executed only within a certain...

The treasury address can be updated by the contract owner to point to a malicious address after deployment

Lines of code ttps://github.com/code-423n4/2023-08-goodentry/blob/71c0c0eca8af957202ccdbf5ce2f2a514ffe2e24/contracts/GeVault.solL58 Vulnerability details Impact Any fees or funds sent to the treasury could potentially be stolen or manipulated Proof of Concept The treasury address can be updated b...

RangeManager.initRange does not refund leftover underlying assets to the contract owner

Lines of code Vulnerability details Impact The initRange function in the RangeManager contract has a vulnerability where leftover underlying assets from the tokenizable range are not properly refunded to the contract owner. This can lead to a situation where the owner's funds are stuck in the...

The treasury address can be updated by the contract owner to point to a malicious address after deployment

Lines of code Vulnerability details Impact Any fees or funds sent to the treasury could potentially be stolen or manipulated Proof of Concept The treasury address can be updated by the contract owner to point to a malicious address after deployment. This presents a risk as the treasury receives a...