Skip to content

Issues: sherlock-audit/2024-10-ethos-network-judging

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

319 Open 18 Closed
319 Open 18 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Melodic Peanut Anteater - pausableUpgradable from oppenzeppline must be used.
#320 opened Nov 4, 2024 by sherlock-admin4
Scrawny Neon Python - Anybody can register their address with a particular profileId Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#319 opened Nov 4, 2024 by sherlock-admin3
1
Basic Pebble Haddock - Review authors should be able to archive and restore reviews from any address that belongs to the profile
#318 opened Nov 4, 2024 by sherlock-admin2
Precise Sapphire Mole - Some Users may get less invites than other after setDefaultNumberOfInvites is called
#317 opened Nov 4, 2024 by sherlock-admin4
Melodic Peanut Anteater - The incorrect address is removed in _deleteAddressAtIndexFromArray()
#316 opened Nov 4, 2024 by sherlock-admin3
Large Amber Camel - use safetransfer instead of transfer
#315 opened Nov 4, 2024 by sherlock-admin2
Electric Satin Koala - EthosProfile which contains multiple address cannot work with archiveReview() and restoreReview()`
#314 opened Nov 4, 2024 by sherlock-admin4
Dry Yellow Canary - User may have his transfer failed when paying price for review
#313 opened Nov 4, 2024 by sherlock-admin3
Dry Yellow Canary - User will get same hash when attestation details are modified slightly
#312 opened Nov 4, 2024 by sherlock-admin2
Precise Sapphire Mole - Potential Hash Collision will cause overwrite of attestation
#311 opened Nov 4, 2024 by sherlock-admin4
Passive Mahogany Porpoise - The incorrect counting of profile addresses wrongly limits their total number Sponsor Disputed The sponsor disputed this issue's validity Will Fix The sponsor confirmed this issue will be fixed
#310 opened Nov 4, 2024 by sherlock-admin3
1
Jovial Chambray Sparrow - a re-registred address will count double in the sum of checkMaxAddresses
#308 opened Nov 4, 2024 by sherlock-admin3
Passive Mahogany Porpoise - Re-registering an address does not remove it from the compromised list
#307 opened Nov 4, 2024 by sherlock-admin2
Main Watermelon Octopus - There’s an error in the _deleteAddressAtIndexFromArray function Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#306 opened Nov 4, 2024 by sherlock-admin4
1
Silly Grape Bear - Unauthorized Attestations Allowed for Archived Profiles in EthosAttestation Contract
#305 opened Nov 4, 2024 by sherlock-admin3
Proud Frost Alligator - Attestation Reviews does not properly handle the case when attestation ownership has changed
#304 opened Nov 4, 2024 by sherlock-admin2
Digital Umber Mustang - attestationById does not get updated when attestations are claimed in EthosAttestation
#303 opened Nov 4, 2024 by sherlock-admin4
Tart Coral Jay - There is no restriction on the number of invitees in the param in bulkInviteAddresses function in EthosProfile contract which could lead to out of bound gas issue.
#302 opened Nov 4, 2024 by sherlock-admin3
Passive Mahogany Porpoise - A compromised address does not lose any ability to perform actions on behalf of the profile
#301 opened Nov 4, 2024 by sherlock-admin2
Quaint Nylon Caterpillar - When a mock address is registered to another user, it loses its reviews, votes, and comments
#300 opened Nov 4, 2024 by sherlock-admin4
Electric Satin Koala - Wrong address gets deleted in _deleteAddressAtIndexFromArray()
#299 opened Nov 4, 2024 by sherlock-admin3
Tart Coral Jay - Signature entered in createAttestation function in EthosAttestation contract could lead to anyone using signature for malicious purpose for other profileId
#298 opened Nov 4, 2024 by sherlock-admin2
Proud Frost Alligator - Lack of proper validations in EthosDiscussion.sol lets a compromised address to add malicious replys on user's behalf
#297 opened Nov 4, 2024 by sherlock-admin4
Expert Ruby Yeti - Upgrades might cause storage collision
#296 opened Nov 4, 2024 by sherlock-admin3
Passive Mahogany Porpoise - An incorrectly identified author will not be able to archive or restore reviews Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#295 opened Nov 4, 2024 by sherlock-admin2
1
ProTip! Adding no:label will show everything without a label.