Skip to content

Issues: sherlock-audit/2024-09-symmio-v0-8-4-update-contest-judging

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

65 Open 11 Closed
65 Open 11 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Albort - Duplicate Liquidators Leading to Incorrect Fee Distribution
#67 opened Oct 8, 2024 by sherlock-admin4
Gaurav2811 - Unchecked ERC20 Transfer Return Value Leads to Potential Fund Loss in Bridge Withdrawals : BridgeFacetImpl.sol:withdrawReceivedBridgeValue
#66 opened Oct 8, 2024 by sherlock-admin3
0xShoonya - Hash Collision Vulnerability in verifyPartyBUpnl Function of LibMuon
#65 opened Oct 8, 2024 by sherlock-admin4
OlaHamid - [M-1] DOS (denial of service) vulnerability in the nested loop within the DiamondLoupFacet.sol:facets function.
#64 opened Oct 8, 2024 by sherlock-admin3
OlaHamid - [H-2] Local var numFacet in the DiamondLoupFacet.sol:facets function is set to zero, desrupting the total logic of the code.
#63 opened Oct 8, 2024 by sherlock-admin4
Aycozzynfada - Missing Cooldown require statement in deallocateForPartyB Function
#62 opened Oct 8, 2024 by sherlock-admin3
OlaHamid - [H-1] RE-ENTRANCY attack in Accout:AccountFacetImpl.sol allow malicious actor to drain funds
#61 opened Oct 8, 2024 by sherlock-admin4
nikhil840096 - Deadline Bypass in Force Close Mechanism Leading to Exploitation
#60 opened Oct 8, 2024 by sherlock-admin3
Aycozzynfada - Denial of Service in Internal Transfer Function Due to PartyB Modifier
#59 opened Oct 8, 2024 by sherlock-admin4
air_0x - pending quotes and balances for Party B are not cleared
#57 opened Oct 8, 2024 by sherlock-admin3
Aycozzynfada - Allocate() is broken due to incorrect precision
#56 opened Oct 8, 2024 by sherlock-admin4
KungFuPanda - LibSettlement::settleUpnl will not revert with a correct "LibSettlement: Invalid partyBUpnlIndex in signature" message at the right time, leading to external integrations problems
#55 opened Oct 8, 2024 by sherlock-admin3
air_0x - dos through lockQuote( )
#54 opened Oct 8, 2024 by sherlock-admin4
xiaoming90 - Unsafe casting of reserveAmount from uint256 to int256
#53 opened Oct 8, 2024 by sherlock-admin3
xiaoming90 - Inconsistent in the liquidation fee leads to unfairness in liquidation process Sponsor Disputed The sponsor disputed this issue's validity Won't Fix The sponsor confirmed this issue will not be fixed
#52 opened Oct 8, 2024 by sherlock-admin4
1
air_0x - abi.encodePacked Allows Hash Collision
#51 opened Oct 8, 2024 by sherlock-admin3
xiaoming90 - Emergency close might be blocked due to insufficient allocated balance Sponsor Confirmed The sponsor acknowledged this issue is valid Won't Fix The sponsor confirmed this issue will not be fixed
#50 opened Oct 8, 2024 by sherlock-admin4
1
xiaoming90 - Position's leverage factor can exceed the protocol's maximum allowable leverage
#49 opened Oct 8, 2024 by sherlock-admin3
xiaoming90 - Rounding error when computing settleAmounts
#48 opened Oct 8, 2024 by sherlock-admin4
xiaoming90 - An excessive number of user positions can be settled even if the shortfall allocated balance needed for fulfilling the close request is only a small amount Sponsor Disputed The sponsor disputed this issue's validity Won't Fix The sponsor confirmed this issue will not be fixed
#47 opened Oct 8, 2024 by sherlock-admin3
1
xiaoming90 - PartyB can settle PartyA’s losing positions even when it is unnecessary and detrimental to Party A’s allocated balance Sponsor Disputed The sponsor disputed this issue's validity Won't Fix The sponsor confirmed this issue will not be fixed
#46 opened Oct 8, 2024 by sherlock-admin4
1
xiaoming90 - PartyA can exploit the force close opportunity to settle other positions' uPNL that they have with other PartyBs/hedgers
#45 opened Oct 8, 2024 by sherlock-admin3
1
xiaoming90 - Ability to revoke access does not expire
#44 opened Oct 8, 2024 by sherlock-admin4
air_0x - User may lose funds when executing user operations
#43 opened Oct 8, 2024 by sherlock-admin3
xiaoming90 - Force Close can be DOSed by exploiting settleUpnl function Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#42 opened Oct 8, 2024 by sherlock-admin4
1
ProTip! Mix and match filters to narrow down what you’re looking for.