Lucene search
+L

71 matches found

Code423n4
Code423n4
added 2021/11/16 12:0 a.m.10 views

redeem may return less than minOut

Handle gzeon Vulnerability details Impact redeem may return less than minOut if wrong token is supplied with poolID=3 because there is no check against minOut in L230-L232. Proof of Concept 1. User mistakenly call redeemUSDC, 100, 3, 0, 100 2. The contract take 100 bBTC from the user, redeem it...

6.9AI score
SaveExploits0
Code423n4
Code423n4
added 2021/11/16 12:0 a.m.15 views

Improper implementation of slippage check

Handle WatchPug Vulnerability details function redeemIERC20 token, uint amount, uint poolId, int128 idx, uint minOut external defend blockLocked whenNotPaused returnsuint out ibbtc.safeTransferFrommsg.sender, addressthis, amount; Pool memory pool = poolspoolId; if poolId = minOut, "Slippage Check...

6.9AI score
SaveExploits0
Code423n4
Code423n4
added 2021/11/14 12:0 a.m.9 views

Zap contract's redeem() function doesn't check which token the user wants to receive

Handle Ruhum Vulnerability details Impact In the redeem function, the user can pass a token address. That's the token they receive in return for the ibbtc they give back. Because of missing address checks the user can provide any possible ERC20 token here without the function reverting. Although...

7AI score
SaveExploits0
Code423n4
Code423n4
added 2021/10/19 12:0 a.m.10 views

Financial loss :: commissionAvailableToRedeem is assigned incorrectly

Handle csanuragjain Vulnerability details Impact This can lead to financial loss where validator will lose the commissionAvailableToRedeem Proof of Concept 1. Navigate to 2. Check the redeemRewards function 3. Let us consider the case where msg.sender == v.address ifmsg.sender == v.address...

7AI score
SaveExploits0
Huntr
Huntr
added 2021/10/17 10:57 a.m.5 views

in microweber/microweber

Description I create a coupon only for one user and also is one-time use coupon. then create two user and both of them can use the coupon but only one of them should able to use the coupon...

0.5AI score
SaveExploits0
Code423n4
Code423n4
added 2021/05/11 12:0 a.m.13 views

The direct redeem fee can be circumvented

Handle janbro Vulnerability details Summary The direct redeem fee can be circumvented Risk Rating Medium Vulnerability Details Since the random NFT is determined in the same transaction a payment or swap is being executed, a malicious actor can revert a transaction if they did not get the NFT the...

7AI score
SaveExploits0
Code423n4
Code423n4
added 2021/05/10 12:0 a.m.12 views

erc1155 are redeemed one by one

Handle paulius.eth Vulnerability details Impact When depositing erc1155s amounts array is used and tokens are sent in bulk safeBatchTransferFrom, however, when redeeming it iterates over the amount and redeems it one by one. It is not convenient when the amount is large. Let's say I deposited 100...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/03/13 8:17 a.m.6 views

CompTIA Security Certification Prep — Lifetime Access for just $30

At long last, top companies are starting to take cybersecurity seriously. As a consequence, technical recruiters are looking for people with hacking skills and certifications to prove it. CompTIA is seen as the gold standard when it comes to cybersecurity exams, with several certifications to...

5.9AI score
SaveExploits0
Hacker One
Hacker One
added 2018/04/02 11:9 a.m.38 views

Vend VDP: Race Condition : Exploiting the loyalty claim https://xxx.vendhq.com/loyalty/claim/email/xxxxx url and gain x amount of loyalty bonus/cash

Hey Team! I love loyalty bonuses, that turns first time users into returning customers , but sometimes loyalty can be exploited, just like in this chase. LT:DR A firtstime loyalty customer will get x times the amount of loyalty bonus from the story by racing the loyalty link x amount of times in...

6.8AI score
SaveExploits0
Hacker One
Hacker One
added 2017/02/01 5:42 a.m.318 views

Pornhub: [xss] pornhubpremium.com, /redeem?code= URL endpoint

The researcher discovered an XSS at the redeem route via the code parameter...

3.1AI score
SaveExploits0
Hacker One
Hacker One
added 2016/06/30 10:13 a.m.20 views

Instacart: CSRF with redeem coupon request

This behavior is working as intended. We have a number of fraud prevention mechanisms in place that limit the effects of a single entity abusing this feature...

2AI score
SaveExploits0
Rows per page
Query Builder