Malicious code in fei-protocol-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3f6d6644b71127369a5d04ac950bd8d58acc6d2684c3ed309ff353adb8d50ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3004 Malicious code in fei-protocol-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3f6d6644b71127369a5d04ac950bd8d58acc6d2684c3ed309ff353adb8d50ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @feiprotocol/fei-protocol-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e7783410449f86adf1184edf3dac3409200046dc124ee7d39bf29419821bf83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

NonCustodialPSM.mint and redeem using mint control buffer in the inverted way

Lines of code Vulnerability details Impact Now there is no control of VOLT's issuance. For example, super fast VOLT mining is allowed, while mint control buffer will sit capped at its bufferCap, not affecting anything. This way mint speed control is disabled. The issue is that NonCustodialPSM.min...

Use safeTransfer/safeTransferFrom consistently instead of transfer/transferFrom

Handle 0xRajeev Vulnerability details Impact It is good to add a require statement that checks the return value of token transfers or to use something like OpenZeppelin’s safeTransfer/safeTransferFrom unless one is sure the given token reverts in case of a failure. Failure to do so will cause...