|
high
|
slither |
BaseEscrow._ethTransfer(address,uint256) (contracts/BaseEscrow.sol#95-98) sends eth to arbitrary user |
0x9c3e06659f1c34f930ce97fcbce6e04ae88e535b
|
$0.00 |
no
|
—
|
3 months ago
|
019bb491-4432-70a1-a118-169deb6eada5
|
|
medium
|
codex |
Authorization uses tx.origin (phishable) |
0xa1dff47e3e9c4a18d341e386c6707a18686fb834
|
$0.00 |
no
|
—
|
3 months ago
|
019bb491-3724-7173-a4ff-65108bf7b085
|
|
medium
|
codex |
DELEGATECALL to computed target without confirmed access control |
0xa1dff47e3e9c4a18d341e386c6707a18686fb834
|
$0.00 |
no
|
—
|
3 months ago
|
019bb491-3724-7173-a4ff-65108bf7b085
|
|
low
|
codex |
External CALL with nonzero value to a constant target (likely self) |
0xa1dff47e3e9c4a18d341e386c6707a18686fb834
|
$0.00 |
no
|
—
|
3 months ago
|
019bb491-3724-7173-a4ff-65108bf7b085
|
|
high
|
codex |
Unprotected initializer allows operator takeover |
0x0b9f13ffab8448089f50073cf24bbe5c7bd8675a
|
$0.00 |
no
|
—
|
3 months ago
|
019bb491-169f-736c-a71d-6f79af8f0433
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.swap(address,bool,int256,uint160,bytes) (contracts/UniswapV3Pool.sol#596-788): |
0xbacf6509c6bf3708f563224f89c2f9b99cb0ea50
|
$50,800.00 |
no
|
—
|
3 months ago
|
019bb490-f3ca-70ef-8a98-9262a2e2e126
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.collectProtocol(address,uint128,uint128) (contracts/UniswapV3Pool.sol#848-868): |
0xbacf6509c6bf3708f563224f89c2f9b99cb0ea50
|
$50,800.00 |
no
|
—
|
3 months ago
|
019bb490-f3ca-70ef-8a98-9262a2e2e126
|
|
high
|
codex |
Computed DELEGATECALL targets reachable (potential arbitrary code execution) |
0x51bb7afb900f6676878a1e49966fcee29d4e449c
|
$50,916.81 |
no
|
—
|
3 months ago
|
019bb490-f3b8-7256-b9da-08514f901ce6
|
|
medium
|
codex |
Computed CALL targets/values allow external calls with ETH (potential arbitrary send/reentrancy) |
0x51bb7afb900f6676878a1e49966fcee29d4e449c
|
$50,916.81 |
no
|
—
|
3 months ago
|
019bb490-f3b8-7256-b9da-08514f901ce6
|
|
medium
|
codex |
External CALLs to computed targets with possible ETH value |
0x764c64b2a09b09acb100b80d8c505aa6a0302ef2
|
$50,967.90 |
no
|
—
|
3 months ago
|
019bb490-f3b0-72b8-bc22-2e4219ff2cd1
|
|
low
|
codex |
State writes to fixed storage slots with no detected guards |
0x764c64b2a09b09acb100b80d8c505aa6a0302ef2
|
$50,967.90 |
no
|
—
|
3 months ago
|
019bb490-f3b0-72b8-bc22-2e4219ff2cd1
|
|
high
|
detector |
ETH value transfer possible |
0xc186e6f0163e21be057e95aa135edd52508d14d3
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-abe0-7015-aafa-7b767eaf03d1
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0xc186e6f0163e21be057e95aa135edd52508d14d3
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-abe0-7015-aafa-7b767eaf03d1
|
|
info
|
cast |
Heavy EXTCODE*/BALANCE usage |
0xc186e6f0163e21be057e95aa135edd52508d14d3
|
$0.00 |
no
|
—
|
3 months ago
|
019bb491-abe0-7015-aafa-7b767eaf03d1
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.swap(address,bool,int256,uint160,bytes) (contracts/UniswapV3Pool.sol#596-788): |
0x9c9b943c90450f601cb389d3851795db1a395710
|
$50,984.11 |
no
|
—
|
3 months ago
|
019bb490-f3a7-7294-98b0-2856128b96ac
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.collectProtocol(address,uint128,uint128) (contracts/UniswapV3Pool.sol#848-868): |
0x9c9b943c90450f601cb389d3851795db1a395710
|
$50,984.11 |
no
|
—
|
3 months ago
|
019bb490-f3a7-7294-98b0-2856128b96ac
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0xed38db26a3a7643f4ea274c3e6139eb3d3a13d49
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-966d-7208-a0e1-502697e2a9ca
|
|
high
|
detector |
ETH value transfer possible |
0xed38db26a3a7643f4ea274c3e6139eb3d3a13d49
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-966d-7208-a0e1-502697e2a9ca
|
|
medium
|
detector |
CREATE/CREATE2 reachable |
0xed38db26a3a7643f4ea274c3e6139eb3d3a13d49
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-966d-7208-a0e1-502697e2a9ca
|
|
low
|
cast |
Contract creation opcode present |
0xed38db26a3a7643f4ea274c3e6139eb3d3a13d49
|
$0.00 |
no
|
—
|
3 months ago
|
019bb491-966d-7208-a0e1-502697e2a9ca
|
|
info
|
cast |
Heavy CALL-family usage |
0xed38db26a3a7643f4ea274c3e6139eb3d3a13d49
|
$0.00 |
no
|
—
|
3 months ago
|
019bb491-966d-7208-a0e1-502697e2a9ca
|
|
info
|
cast |
Heavy EXTCODE*/BALANCE usage |
0xed38db26a3a7643f4ea274c3e6139eb3d3a13d49
|
$0.00 |
no
|
—
|
3 months ago
|
019bb491-966d-7208-a0e1-502697e2a9ca
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.collectProtocol(address,uint128,uint128) (contracts/UniswapV3Pool.sol#848-868): |
0x54a52448772fd6ed92bcee6598d0719bce333f5c
|
$51,306.00 |
no
|
—
|
3 months ago
|
019bb490-f38d-730e-af80-0b3d533d3b14
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.swap(address,bool,int256,uint160,bytes) (contracts/UniswapV3Pool.sol#596-788): |
0x54a52448772fd6ed92bcee6598d0719bce333f5c
|
$51,306.00 |
no
|
—
|
3 months ago
|
019bb490-f38d-730e-af80-0b3d533d3b14
|
|
medium
|
codex |
ERC20 collateral gains sent to trove are not transferred, breaking accounting |
0x6a9f9d6f5d672a9784c5e560a9648de6cbe2c548
|
$51,339.76 |
no
|
—
|
3 months ago
|
019bb490-f382-73c7-8d99-c44c6976ea98
|
|
low
|
codex |
ERC20Permit domain separator is fixed at deployment (fork replay risk) |
0x6a9f9d6f5d672a9784c5e560a9648de6cbe2c548
|
$51,339.76 |
no
|
—
|
3 months ago
|
019bb490-f382-73c7-8d99-c44c6976ea98
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.collectProtocol(address,uint128,uint128) (contracts/UniswapV3Pool.sol#848-868): |
0x701b319aff36311f720f0a1ebd6636dd84bb3e8b
|
$51,352.06 |
no
|
—
|
3 months ago
|
019bb490-f377-72f4-b7e5-89cc2ac51ca9
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.swap(address,bool,int256,uint160,bytes) (contracts/UniswapV3Pool.sol#596-788): |
0x701b319aff36311f720f0a1ebd6636dd84bb3e8b
|
$51,352.06 |
no
|
—
|
3 months ago
|
019bb490-f377-72f4-b7e5-89cc2ac51ca9
|
|
high
|
codex |
Approved operator can burn someone else’s NFT and steal the ETH backing |
0xc315c1982efab100b4a3eca4035567358f85bbb2
|
$51,373.86 |
no
|
—
|
3 months ago
|
019bb490-f36f-70c4-96e3-f0e30d2d9ef1
|
|
low
|
codex |
Predictable/malleable randomness for genesis token assignment |
0xc315c1982efab100b4a3eca4035567358f85bbb2
|
$51,373.86 |
no
|
—
|
3 months ago
|
019bb490-f36f-70c4-96e3-f0e30d2d9ef1
|
|
low
|
codex |
Potential ETH value transfer via computed CALL |
0xa4ed12b05ee199c64c01434bbe73f67709b53682
|
$51,410.07 |
no
|
—
|
3 months ago
|
019bb490-f367-73ff-b398-4c0bbeb0b015
|
|
low
|
codex |
External CALLs to computed targets without detected reentrancy guard |
0xa4ed12b05ee199c64c01434bbe73f67709b53682
|
$51,410.07 |
no
|
—
|
3 months ago
|
019bb490-f367-73ff-b398-4c0bbeb0b015
|
|
medium
|
codex |
Computed external CALLs (some with ETH value) without detectable guards or return checks |
0x3fbe1f8fc5ddb27d428aa60f661eaaab0d2000ce
|
$51,438.93 |
no
|
—
|
3 months ago
|
019bb490-f35f-7392-9feb-8212b2eae35f
|
|
low
|
codex |
CREATE opcode reachable (factory-like deployment) with unclear access control |
0x3fbe1f8fc5ddb27d428aa60f661eaaab0d2000ce
|
$51,438.93 |
no
|
—
|
3 months ago
|
019bb490-f35f-7392-9feb-8212b2eae35f
|
|
high
|
detector |
ETH value transfer possible |
0x516b8ca95eb59e7a69d79a27522ed63fcbe22b64
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-5c99-70d4-b14e-863e8385bc51
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0x516b8ca95eb59e7a69d79a27522ed63fcbe22b64
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-5c99-70d4-b14e-863e8385bc51
|
|
high
|
slither |
BaseEscrow._ethTransfer(address,uint256) (contracts/BaseEscrow.sol#95-98) sends eth to arbitrary user |
0x39c84b27db3219b876e6f09ddb4140bc67eecb69
|
$51,609.34 |
no
|
—
|
3 months ago
|
019bb490-f341-7224-a82a-cad72e12cb5f
|
|
high
|
detector |
ETH value transfer possible |
0x9c3e06659f1c34f930ce97fcbce6e04ae88e535b
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-4432-70a1-a118-169deb6eada5
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0x9c3e06659f1c34f930ce97fcbce6e04ae88e535b
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-4432-70a1-a118-169deb6eada5
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0x1c0df262a40f99d7d6145faba04db75d1126f93d
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-3d27-7127-9860-f89577df5ac6
|
|
high
|
detector |
ETH value transfer possible |
0x1c0df262a40f99d7d6145faba04db75d1126f93d
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-3d27-7127-9860-f89577df5ac6
|
|
high
|
codex |
Computed DELEGATECALL target reachable (potential arbitrary code execution) |
0x07cdb44fa1e7eceb638c12a3451a3dc9ce1400e4
|
$51,658.37 |
no
|
—
|
3 months ago
|
019bb490-f330-732b-874c-9489d47f6791
|
|
medium
|
codex |
tx.origin appears in authorization logic |
0x07cdb44fa1e7eceb638c12a3451a3dc9ce1400e4
|
$51,658.37 |
no
|
—
|
3 months ago
|
019bb490-f330-732b-874c-9489d47f6791
|
|
high
|
detector |
Authorization based on tx.origin |
0xa1dff47e3e9c4a18d341e386c6707a18686fb834
|
$0.00 |
no
|
—
|
3 months ago
|
019bb491-3724-7173-a4ff-65108bf7b085
|
|
high
|
detector |
Untrusted DELEGATECALL target reachable |
0xa1dff47e3e9c4a18d341e386c6707a18686fb834
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-3724-7173-a4ff-65108bf7b085
|
|
medium
|
detector |
ETH value transfer possible |
0xa1dff47e3e9c4a18d341e386c6707a18686fb834
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-3724-7173-a4ff-65108bf7b085
|
|
low
|
detector |
External CALL present |
0xa1dff47e3e9c4a18d341e386c6707a18686fb834
|
$0.00 |
no
|
no
|
3 months ago
|
019bb491-3724-7173-a4ff-65108bf7b085
|
|
medium
|
cast |
DELEGATECALL present |
0xa1dff47e3e9c4a18d341e386c6707a18686fb834
|
$0.00 |
no
|
—
|
3 months ago
|
019bb491-3724-7173-a4ff-65108bf7b085
|
|
info
|
cast |
Heavy EXTCODE*/BALANCE usage |
0xa1dff47e3e9c4a18d341e386c6707a18686fb834
|
$0.00 |
no
|
—
|
3 months ago
|
019bb491-3724-7173-a4ff-65108bf7b085
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.collectProtocol(address,uint128,uint128) (contracts/UniswapV3Pool.sol#848-868): |
0x826b34e62320108a9fa38a080360d693a8a73111
|
$51,666.39 |
no
|
—
|
3 months ago
|
019bb490-f329-72a3-a046-f38eac5d1503
|