|
high
|
codex |
Reentrancy in sendPayment enables multiple payouts |
0xde5d4949f445650325c7c8739610c3a979c7a6db
|
$58,651.07 |
no
|
—
|
3 months ago
|
019bab3b-ab66-71c2-bd2e-5152da730c58
|
|
high
|
codex |
Claim mints tokenId 0 for every NFT, causing claim DoS |
0xde5d4949f445650325c7c8739610c3a979c7a6db
|
$58,651.07 |
no
|
—
|
3 months ago
|
019bab3b-ab66-71c2-bd2e-5152da730c58
|
|
high
|
cast |
SELFDESTRUCT present |
0x5018cc0d628fb322b2a040cfcd269a36c60b1538
|
$0.00 |
no
|
—
|
3 months ago
|
019bab3d-0c7e-71f2-bf8e-4275a4cf132f
|
|
high
|
detector |
Authorization based on tx.origin |
0x5e1e6dcf05fb49568aa66f40b9e3834c86008c8f
|
$0.00 |
no
|
—
|
3 months ago
|
019bab3c-e9f9-72ab-84cf-abd0852573bf
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0x24aa958c90b7973dc16c63c9992f69e1767377ae
|
$0.00 |
no
|
no
|
3 months ago
|
019bab3c-ddda-7134-85ec-e9007b0ed1a7
|
|
high
|
detector |
ETH value transfer possible |
0x24aa958c90b7973dc16c63c9992f69e1767377ae
|
$0.00 |
no
|
no
|
3 months ago
|
019bab3c-ddda-7134-85ec-e9007b0ed1a7
|
|
high
|
detector |
Untrusted DELEGATECALL target reachable |
0x3463c6572bf1ea4c719fc229bd0d4956b0585a2c
|
$0.00 |
no
|
no
|
3 months ago
|
019bab3c-cabb-72fc-a916-554f86904ec9
|
|
high
|
codex |
Reentrancy enables double-withdraw of staked VIRTUE |
0x0dd5a35fe4cd65fe7928c7b923902b43d6ea29e7
|
$59,125.30 |
no
|
—
|
3 months ago
|
019bab3b-ab05-7055-bef7-363c9c09e395
|
|
high
|
detector |
ETH value transfer possible |
0xb0d6eed90f8e497b867f557c44a49c8c81fa0a5d
|
$0.00 |
no
|
no
|
3 months ago
|
019bab3c-acf0-7088-b150-fa883a5349a3
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0xb0d6eed90f8e497b867f557c44a49c8c81fa0a5d
|
$0.00 |
no
|
no
|
3 months ago
|
019bab3c-acf0-7088-b150-fa883a5349a3
|
|
high
|
codex |
Unregistered address can execute BNFT deposit flow |
0x00c452affee3a17d9cecc1bcd2b8d5c7635c4cb9
|
$59,182.72 |
no
|
—
|
3 months ago
|
019bab3b-aaee-7307-8a62-f0c903f3c8f8
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0x68fe80c6e97e0c8613e2fed344358c6635ba5366
|
$0.00 |
no
|
no
|
3 months ago
|
019bab3c-a6af-702e-81df-bc4bc14e96dc
|
|
high
|
detector |
ETH value transfer possible |
0x68fe80c6e97e0c8613e2fed344358c6635ba5366
|
$0.00 |
no
|
no
|
3 months ago
|
019bab3c-a6af-702e-81df-bc4bc14e96dc
|
|
high
|
slither |
Reentrancy in CoinToken._transfer(address,address,uint256) (contracts/Contract.sol#634-671): |
0xf20bc3b10b95cde1368a2f4219a63ed3fd8b9089
|
$59,327.00 |
no
|
—
|
3 months ago
|
019bab3b-aacf-703b-9022-3246f6b562b2
|
|
high
|
codex |
Owner can arbitrarily change fees and limits, enabling honeypot behavior |
0xf20bc3b10b95cde1368a2f4219a63ed3fd8b9089
|
$59,327.00 |
no
|
—
|
3 months ago
|
019bab3b-aacf-703b-9022-3246f6b562b2
|
|
high
|
codex |
Signed mint does not bind payment amount, enabling free or underpriced mints |
0x69bcb93d13d1063335269e8602b009485abd3e87
|
$59,479.28 |
no
|
—
|
3 months ago
|
019bab3b-aaa7-70e2-8f3a-b33ac294d2ca
|
|
high
|
detector |
Authorization based on tx.origin |
0x4b14ddc1b1b4bb3a89d574c2708c609d4e192730
|
$0.00 |
no
|
—
|
3 months ago
|
019bab3c-509f-7157-9791-77edf365d19b
|
|
high
|
detector |
Untrusted DELEGATECALL target reachable |
0x927a83c679a5e1a6435d6bfaef7f20d4db23e2cc
|
$0.00 |
no
|
no
|
3 months ago
|
019bab3c-4a33-7098-9325-ebfbff005bf9
|
|
high
|
detector |
Authorization based on tx.origin |
0x927a83c679a5e1a6435d6bfaef7f20d4db23e2cc
|
$0.00 |
no
|
—
|
3 months ago
|
019bab3c-4a33-7098-9325-ebfbff005bf9
|
|
high
|
slither |
SquirrelStash.withdrawTokenInternal(address,address,uint256) (contracts/Contract.sol#236-245) ignores return value by ERC20(token).transfer(recipient,amount) (contracts/Contract... |
0x3d88fc5d3fb84caf45011a790a994928789c31a8
|
$60,000.97 |
no
|
—
|
3 months ago
|
019bab3b-aa50-70a2-8a41-e573c49b0a5e
|
|
high
|
slither |
SquirrelStash.withdrawEthInternal(address,uint256) (contracts/Contract.sol#252-261) sends eth to arbitrary user |
0x3d88fc5d3fb84caf45011a790a994928789c31a8
|
$60,000.97 |
no
|
—
|
3 months ago
|
019bab3b-aa50-70a2-8a41-e573c49b0a5e
|
|
high
|
detector |
Authorization based on tx.origin |
0xb157dc78c2815280906a6730984a5e0dca65e247
|
$0.00 |
no
|
—
|
3 months ago
|
019bab3c-03ac-7154-aa8e-81b80b4bfd3c
|
|
high
|
detector |
Untrusted DELEGATECALL target reachable |
0xb157dc78c2815280906a6730984a5e0dca65e247
|
$0.00 |
no
|
no
|
3 months ago
|
019bab3c-03ac-7154-aa8e-81b80b4bfd3c
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0x8d1fa828e0b99f2cd9bec6c51ff11e97b502db8a
|
$0.00 |
no
|
no
|
3 months ago
|
019bab3b-fcd0-7290-bd8b-dd7b4bf015df
|
|
high
|
detector |
ETH value transfer possible |
0x8d1fa828e0b99f2cd9bec6c51ff11e97b502db8a
|
$0.00 |
no
|
no
|
3 months ago
|
019bab3b-fcd0-7290-bd8b-dd7b4bf015df
|
|
high
|
slither |
StablesPool.safeBsdTransfer(address,uint256) (contracts/Contract.sol#676-685) ignores return value by bsd.transfer(_to,_bsdBal) (contracts/Contract.sol#682-683) |
0xa249ee8255df0aa00a15262b16bca3efd66c3e4c
|
$60,260.56 |
no
|
—
|
3 months ago
|
019bab3b-aa19-71a6-879c-a96e48ff592a
|
|
high
|
slither |
StablesPool.safeBsdTransfer(address,uint256) (contracts/Contract.sol#676-685) ignores return value by bsd.transfer(_to,_amount) (contracts/Contract.sol#683-684) |
0xa249ee8255df0aa00a15262b16bca3efd66c3e4c
|
$60,260.56 |
no
|
—
|
3 months ago
|
019bab3b-aa19-71a6-879c-a96e48ff592a
|
|
high
|
slither |
BoringVault.enter(address,ERC20,uint256,address,uint256) (src/base/BoringVault.sol#74-85) uses arbitrary from in transferFrom: asset.safeTransferFrom(from,address(this),assetAmo... |
0x83599937c2c9bea0e0e8ac096c6f32e86486b410
|
$60,443.62 |
no
|
—
|
3 months ago
|
019bab3b-aa09-7136-8249-3b5f5266a02c
|
|
high
|
detector |
Authorization based on tx.origin |
0xc3fe3e0ea967b2878fab2fec7e1067b32adf1c03
|
$0.00 |
no
|
—
|
3 months ago
|
019bab3b-cd42-72ee-8d44-36346e11fccc
|
|
high
|
slither |
GovTreasurer.safeGDAOTransfer(address,uint256) (contracts/Contract.sol#1105-1113) ignores return value by gdao.transfer(_to,GDAOBal) (contracts/Contract.sol#1109-1110) |
0x4dac3e07316d2a31baabb252d89663dee8f76f09
|
$61,154.96 |
no
|
—
|
3 months ago
|
019bab3b-a9ce-7222-9441-b6180eb0d007
|
|
high
|
slither |
GovTreasurer.safeGDAOTransfer(address,uint256) (contracts/Contract.sol#1105-1113) ignores return value by gdao.transfer(_to,_amount) (contracts/Contract.sol#1112-1113) |
0x4dac3e07316d2a31baabb252d89663dee8f76f09
|
$61,154.96 |
no
|
—
|
3 months ago
|
019bab3b-a9ce-7222-9441-b6180eb0d007
|
|
high
|
detector |
Untrusted DELEGATECALL target reachable |
0xfc3f1be6467c41a4c70aa0515b0ca00ca3c2af22
|
$55,646.55 |
no
|
no
|
3 months ago
|
019bab3b-ad04-704c-8a79-8e4f314134cb
|
|
high
|
detector |
ETH value transfer possible |
0x2a943e0432b22a3c3cd65b8c9045259b791f96b8
|
$55,666.45 |
no
|
no
|
3 months ago
|
019bab3b-acfe-71a5-a16d-5fed3f762c34
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0x2a943e0432b22a3c3cd65b8c9045259b791f96b8
|
$55,666.45 |
no
|
no
|
3 months ago
|
019bab3b-acfe-71a5-a16d-5fed3f762c34
|
|
high
|
detector |
ETH value transfer possible |
0xb986a32f468edad2f2f890094ea39ae484fbcaf4
|
$55,703.69 |
no
|
no
|
3 months ago
|
019bab3b-acf8-7080-9616-487ba7f2480f
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0xb986a32f468edad2f2f890094ea39ae484fbcaf4
|
$55,703.69 |
no
|
no
|
3 months ago
|
019bab3b-acf8-7080-9616-487ba7f2480f
|
|
high
|
detector |
ETH value transfer possible |
0xfececebf44d38858a0c478c2c4afa2601f5352fb
|
$55,734.56 |
no
|
no
|
3 months ago
|
019bab3b-acf2-7174-8d21-0915bb1a7ac8
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0xfececebf44d38858a0c478c2c4afa2601f5352fb
|
$55,734.56 |
no
|
no
|
3 months ago
|
019bab3b-acf2-7174-8d21-0915bb1a7ac8
|
|
high
|
detector |
ETH value transfer possible |
0xc8d2509dee0335ad8dd45667a60cb73e2cc3a7c7
|
$55,744.20 |
no
|
no
|
3 months ago
|
019bab3b-aceb-73bd-bc34-6a5988516fdf
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0xc8d2509dee0335ad8dd45667a60cb73e2cc3a7c7
|
$55,744.20 |
no
|
no
|
3 months ago
|
019bab3b-aceb-73bd-bc34-6a5988516fdf
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0xc2a8f4fc2aa6cddb18ae19df1783f9f33ac2e33b
|
$55,821.86 |
no
|
no
|
3 months ago
|
019bab3b-ace4-739d-8ae7-4a280235f4a5
|
|
high
|
detector |
ETH value transfer possible |
0xc2a8f4fc2aa6cddb18ae19df1783f9f33ac2e33b
|
$55,821.86 |
no
|
no
|
3 months ago
|
019bab3b-ace4-739d-8ae7-4a280235f4a5
|
|
high
|
detector |
Authorization based on tx.origin |
0x951f99350d816c0e160a2c71defe828bdfc17f12
|
$55,827.39 |
no
|
—
|
3 months ago
|
019bab3b-acdd-73a3-9188-eb035b52b55e
|
|
high
|
detector |
Authorization based on tx.origin |
0x7183209867489e1047f3a7c23ea1aed9c4e236e8
|
$55,856.61 |
no
|
—
|
3 months ago
|
019bab3b-acd5-731f-9ee9-3cb2fb20d89e
|
|
high
|
detector |
ETH value transfer possible |
0x8b878afe454e31cf0a79c6d7cf2f077dd286c12f
|
$55,895.94 |
no
|
no
|
3 months ago
|
019bab3b-acc5-7273-82eb-88bed2f9e562
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0x8b878afe454e31cf0a79c6d7cf2f077dd286c12f
|
$55,895.94 |
no
|
no
|
3 months ago
|
019bab3b-acc5-7273-82eb-88bed2f9e562
|
|
high
|
detector |
SELFDESTRUCT reachable |
0x8b878afe454e31cf0a79c6d7cf2f077dd286c12f
|
$55,895.94 |
no
|
no
|
3 months ago
|
019bab3b-acc5-7273-82eb-88bed2f9e562
|
|
high
|
cast |
SELFDESTRUCT present |
0x8b878afe454e31cf0a79c6d7cf2f077dd286c12f
|
$55,895.94 |
no
|
—
|
3 months ago
|
019bab3b-acc5-7273-82eb-88bed2f9e562
|
|
high
|
detector |
ETH value transfer possible |
0xb8098e1cb8645da67238e340558ec1c8625b10db
|
$55,939.90 |
no
|
no
|
3 months ago
|
019bab3b-acbc-72d4-be96-d51f69884b9a
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0xb8098e1cb8645da67238e340558ec1c8625b10db
|
$55,939.90 |
no
|
no
|
3 months ago
|
019bab3b-acbc-72d4-be96-d51f69884b9a
|