Search results

Contract does not earn any boosted position rewards in Maverick Connector

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

🤖_1235_groupAI based duplicate group recommendationAI based duplicate group recommendation

🤖_primaryAI based primary recommendationAI based primary recommendation

bugSomething isn't workingSomething isn't working

grade-b

M-01

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#1561 In code-423n4/2024-04-noya-findings;

· c4-bot-3 opened on May 17, 2024

Extra rewards are not updated in curve connector when harvestConvexRewards is called

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

🤖_1111_groupAI based duplicate group recommendationAI based duplicate group recommendation

bugSomething isn't workingSomething isn't working

M-02

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#1554 In code-423n4/2024-04-noya-findings;

· c4-bot-7 opened on May 17, 2024

Noya is not compatible with tokens whose balance changes outside of transfers causing funds to get stuck in the contract

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

🤖_397_groupAI based duplicate group recommendationAI based duplicate group recommendation

bugSomething isn't workingSomething isn't working

downgraded by judgeJudge downgraded the risk level of this issueJudge downgraded the risk level of this issue

edited-by-warden

M-03

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor disputedSponsor cannot duplicate the issue, or otherwise disagrees this is an issueSponsor cannot duplicate the issue, or otherwise disagrees this is an issue

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#1548 In code-423n4/2024-04-noya-findings;

· c4-bot-9 opened on May 17, 2024

When calling DolomiteConnector::transferBetweenAccounts, the positions of the deposited token are not updated

🤖_1023_groupAI based duplicate group recommendationAI based duplicate group recommendation

bugSomething isn't workingSomething isn't working

downgraded by judgeJudge downgraded the risk level of this issueJudge downgraded the risk level of this issue

duplicate-862

grade-b

Q-01

QA (Quality Assurance)Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntaxAssets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#1542 In code-423n4/2024-04-noya-findings;

· c4-bot-1 opened on May 17, 2024

performanceFeeReceiver cannot mint any performance fee shares even if TVL is dropped by only a very tiny amount

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

🤖_28_groupAI based duplicate group recommendationAI based duplicate group recommendation

🤖_primaryAI based primary recommendationAI based primary recommendation

bugSomething isn't workingSomething isn't working

M-04

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor disputedSponsor cannot duplicate the issue, or otherwise disagrees this is an issueSponsor cannot duplicate the issue, or otherwise disagrees this is an issue

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#1532 In code-423n4/2024-04-noya-findings;

· c4-bot-5 opened on May 17, 2024

AccountingManager contract's previewDeposit, previewMint, previewWithdraw, and previewRedeem functions are not compliant with EIP-4626 standard

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

🤖_16_groupAI based duplicate group recommendationAI based duplicate group recommendation

bugSomething isn't workingSomething isn't working

M-05

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#1522 In code-423n4/2024-04-noya-findings;

· c4-bot-3 opened on May 17, 2024

maxDeposit, maxMint, maxWithdraw, and maxRedeem functions do not return 0 when they should

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

🤖_primaryAI based primary recommendationAI based primary recommendation

bugSomething isn't workingSomething isn't working

M-06

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor acknowledgedTechnically the issue is correct, but we're not going to resolve it for XYZ reasonsTechnically the issue is correct, but we're not going to resolve it for XYZ reasons

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#1517 In code-423n4/2024-04-noya-findings;

· c4-bot-3 opened on May 17, 2024

Value of asset token can be incorrect when usage of ETH/USD Chainlink oracle is needed

3 (High Risk)Assets can be stolen/lost/compromised directlyAssets can be stolen/lost/compromised directly

🤖_803_groupAI based duplicate group recommendationAI based duplicate group recommendation

🤖_primaryAI based primary recommendationAI based primary recommendation

bugSomething isn't workingSomething isn't working

H-01

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

upgraded by judgeOriginal issue severity upgraded from QA/Gas by judgeOriginal issue severity upgraded from QA/Gas by judge

Status: Open.

#1509 In code-423n4/2024-04-noya-findings;

· c4-bot-4 opened on May 17, 2024

Stale price can be used in getValueFromChainlinkFeed function

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

🤖_59_groupAI based duplicate group recommendationAI based duplicate group recommendation

bugSomething isn't workingSomething isn't working

M-07

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#1501 In code-423n4/2024-04-noya-findings;

· c4-bot-7 opened on May 17, 2024

QA Report

bugSomething isn't workingSomething isn't working

grade-b

Q-02

QA (Quality Assurance)Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntaxAssets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#1498 In code-423n4/2024-04-noya-findings;

· c4-bot-2 opened on May 17, 2024

Lack of Slippage Controls in retrieveTokensForWithdraw Function

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

🤖_139_groupAI based duplicate group recommendationAI based duplicate group recommendation

🤖_primaryAI based primary recommendationAI based primary recommendation

bugSomething isn't workingSomething isn't working

insufficient quality reportThis report is not of sufficient qualityThis report is not of sufficient quality

M-08

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

Status: Open.

#1490 In code-423n4/2024-04-noya-findings;

· c4-bot-2 opened on May 17, 2024

Incorrect modifier condition

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

🤖_08_groupAI based duplicate group recommendationAI based duplicate group recommendation

bugSomething isn't workingSomething isn't working

edited-by-warden

M-09

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#1488 In code-423n4/2024-04-noya-findings;

· c4-bot-4 opened on May 17, 2024