20203 matches found
Inherit a wrong contract - Authorizable.sol.
Lines of code Vulnerability details Risk rating high Title Inherit a wrong contract - Authorizable.sol. Vulnerability Details Impact By an untrust account, the system could be invaliable. Proof of Concept The Authorizable.soladdAuthorization and Authorizable.solremobeAuthorization functions as...
Wrong accounting used in auctionDebt in AccountingEngine contract
Lines of code Vulnerability details Impact As the title suggests, the accounting in auctionDebt function is incorrect. In this particular section of the code: uint256 coinBalance = safeEngine.coinBalanceaddressthis; uint256 debtBalance = safeEngine.debtBalanceaddressthis; if...
correct use of safeAllowed modifier
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant proof that illustrates the concept. Tools Used Recommended Mitigation Steps function...
at _modifyCollateralBalance when locking and generating debt your wad is going to be negative number but at the token Collateral mapping should not have any negative numbers
Lines of code Vulnerability details Impact the protocol will not work, all functions will not work Proof of Concept you cannot set negative number to uint256 Tools Used manual Recommended Mitigation Steps change the mapping to : mappingbytes32 cType = mappingaddress safe = int256 wad public...
[M-08] Mitigation error: withdrawStuckTokens() breaks trackedCvxBalance
Lines of code Vulnerability details Impact withdrawStuckTokens may incorrectly reduce trackedCvxBalance, which breaks the balance accounting. Proof of Concept function withdrawStuckTokensaddress token public onlyOwner uint256 tokenBalance = IERC20token.balanceOfaddressthis; if token == CVXADDRESS...
failed imports
Lines of code Vulnerability details Impact Unable to comply correctly Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant proof that illustrates the concept. Tools Used manual and slither Recommended Mitigation Steps install...
CamelotRelayer uses wrong interface for CamelotPair
Lines of code Vulnerability details Impact The CamelotRelayer uses the OracleLibrary as an interface for accessing oracle data from the CamelotPair contract which is the Camelot DEX's equivalent of a pool using the OracleLibrary from UniSwapV3Pool's periphery contracts but because the CamelotPair...
Rounding Bug in OracleLibrary.consult Impacting Pricing Accuracy and User Costs
Lines of code Vulnerability details Impact The rounding bug in the OracleLibrary.consult function has a significant impact on applications that rely on this function for price calculations, especially those involving asset swaps, collateral valuation, or other financial transactions. The bug caus...
CVE-2023-42120
creationtimestamp| type| source ---|---|--- 2023-10-23 05:09:12+00:00| published-proof-of-concept| https://t.me/CNArsenal/1340 2023-10-23 10:58:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9247 2023-10-23 17:24:17+00:00| published-proof-of-concept|...
CVE-2023-31466
creationtimestamp| type| source ---|---|--- 2023-10-22 22:26:28+00:00| published-proof-of-concept| Telegram/7a7fweCj36f2cd-3XHNsj84vMqrUUzQeix11cFhtTPwJ...
CVE-2022-46722
creationtimestamp| type| source ---|---|--- 2023-10-22 05:00:14+00:00| published-proof-of-concept| Telegram/4626rOifAR8lrhV3YZPjT1LCFIP6QyPu2FBAoN97b9E...
CVE-2023-34051
creationtimestamp| type| source ---|---|--- 2023-10-20 19:16:49+00:00| published-proof-of-concept| https://t.me/ctinow/144469 2023-10-21 06:50:53+00:00| published-proof-of-concept| https://t.me/proxybar/1788 2023-10-21 17:07:26+00:00| published-proof-of-concept|...
CVE-2023-4488
creationtimestamp| type| source ---|---|--- 2023-10-20 03:30:00+00:00| published-proof-of-concept| https://t.me/codeb0ss/1259 2023-10-24 19:46:01+00:00| published-proof-of-concept| Telegram/MH7W9xti9Ufogoeh4Aj-lvsVoLvgje1UwX9vgwgn1I1IA...
number of txs of excutors must be excutores + 1 but this loop will +1 in every cycle
Lines of code Vulnerability details Impact number of txns of excutors must be excutores + 1 but this loop will +1 in every cycle the code structure is designed the way the number of txns of excutors in enableExecutorPluginOnSubAccount function counts the length of executors txns and it should be...
Nonce is not incremented after using signature for policy validation
Lines of code Vulnerability details Impact Nonce is not incremented after using signature for policy validation Proof of Concept In PolicyValidator.sol there is a function function isPolicySignatureValid address account, address to, uint256 value, bytes memory data, Enum.Operation operation, byte...
A new executor cannot be added because of the wrong restriction
Lines of code Vulnerability details Impact A new executor cannot be added because of the wrong restriction Proof of Concept if !subAccountToExecutorssubAccount.addexecutor revert AlreadyExists; The if statement checks if executor to be added to the subAccountToExecutors mapping is not in the...
No function to remove a subaccount
Lines of code Vulnerability details Impact A subaccount that has been taken over by an attacker can not be removed. Proof of Concept The WalletRegistry.sol contract has a registerSubAccount function but does not have another function that can remove a subAccount in case a subAccount is compromise...
No proper validation of Singleton
Lines of code Vulnerability details Bug Description Operators, executors, or the Main Console account can execute transactions on behalf of a SubAccount. SubAccounts must have an enabled SafeModerator guard, which checks whether the guard and handler have not been disabled or updated, and whether...
Missing payable modifier in ExecutorPlugin.executeTransaction(): Restricts Use of Native Assets (ETH) with Transactions
Lines of code Vulnerability details Impact A registered executor for a submodule cannot send ETH native assets with a transaction because the payable modifier is missing in the executeTransaction function. It's essential to address this issue to ensure full compatibility and functionality for...