Skip to content
This repository has been archived by the owner on May 26, 2023. It is now read-only.

Issues: sherlock-audit/2022-10-union-finance-judging

23 Open 140 Closed
23 Open 140 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

hyh - Vouchers and vouchees indices become corrupted by UserManager's cancelVouch Has Duplicates Medium Sponsor Confirmed
#157 opened Nov 4, 2022 by sherlock-admin
1
hyh - repayBorrow calls wrong frozen info update for overdue repayments High Sponsor Confirmed
#143 opened Nov 4, 2022 by sherlock-admin
4
Bahurum - A stake that has just been locked gets full reward multiplier Medium Sponsor Confirmed
#142 opened Nov 4, 2022 by sherlock-admin
1
hyh - Stakers will lose their rewards as updateLocked() updates only the first active vouches until there is a prepayment High Sponsor Confirmed
#135 opened Nov 4, 2022 by sherlock-admin
3
hyh - repayBorrow is inaccessible by overdue borrowers Has Duplicates High Sponsor Confirmed
#133 opened Nov 4, 2022 by sherlock-admin
1
Jeiwan - Removed adapter can still hold funds, removed token can still be deposited to a market Medium Sponsor Confirmed
#126 opened Nov 4, 2022 by sherlock-admin
1
Bahurum - Loan can be written off by anybody before overdue delay expires High Sponsor Confirmed
#115 opened Nov 4, 2022 by sherlock-admin
1
hyh - Stakers can have their funds locked for an extended period not related to the performance of their borrowers Medium Sponsor Disputed
#114 opened Nov 4, 2022 by sherlock-admin
5
bin2chen - updateTrust() vouchers also need check maxVouchers Medium Sponsor Confirmed
#109 opened Nov 4, 2022 by sherlock-admin
1
ctf_sec - Unsafe downcasting arithmetic operation in UserManager related contract and in UToken.sol Has Duplicates Medium Sponsor Confirmed
#96 opened Nov 4, 2022 by sherlock-admin
2
ak1 - UserManager.sol#L438-L466 : getFrozenInfo could revert due to out of gas when the vouchees array size is large Medium Sponsor Confirmed
#87 opened Nov 4, 2022 by sherlock-admin
2
obront - getUserInfo() returns incorrect values for locked and stakedAmount Medium Sponsor Confirmed
#80 opened Nov 4, 2022 by sherlock-admin
1
hyh - Priority withdrawal sequence array will grow infinitely over time Has Duplicates Medium Sponsor Confirmed
#76 opened Nov 4, 2022 by sherlock-admin
1
hansfriese - AssetManager.rebalance() will revert when the balance of tokenAddress in the money market is 0. Has Duplicates Medium Sponsor Confirmed
#75 opened Nov 4, 2022 by sherlock-admin
1
hyh - Staker rewards can be gathered with maximal multiplier no matter how borrowers are overdue Has Duplicates High Sponsor Confirmed
#74 opened Nov 4, 2022 by sherlock-admin
2
Ch_301 - gas limit DoS via unbounded operations Medium Sponsor Confirmed
#69 opened Nov 4, 2022 by sherlock-admin
2
hyh - Partial withdrawals by AssetManager lead to user funds freeze Has Duplicates Medium Sponsor Confirmed
#50 opened Nov 4, 2022 by sherlock-admin
1
hyh - UNION rewards issuance can be maximized without providing credit High Sponsor Confirmed
#49 opened Nov 4, 2022 by sherlock-admin
1
hyh - It's impossible to writing off any vouch fully for an outside actor Has Duplicates Medium Sponsor Confirmed
#40 opened Nov 4, 2022 by sherlock-admin
1
caventa - Asset manager's deposit, withdraw and rebalance function calls will get reverted when one of the adapters is broken or paused Medium Sponsor Confirmed
#37 opened Nov 4, 2022 by sherlock-admin
1
hyh - Maximal approvals remain for the AssetManager's adapters and tokens after removal Has Duplicates Medium Sponsor Confirmed
#36 opened Nov 4, 2022 by sherlock-admin
1
lemonmon - AssetManager::withdraw will not return false, when fail to send the withdraw amount Has Duplicates Medium Sponsor Confirmed
#27 opened Nov 4, 2022 by sherlock-admin
lemonmon - Comptroller::withdrawRewards accounting error results in incorrect inflation index Has Duplicates Medium Sponsor Confirmed
#26 opened Nov 4, 2022 by sherlock-admin
1
ProTip! Type g i on any issue or pull request to go back to the issue listing page.