|
medium
|
slither |
Reentrancy in UniswapV3Pool.swap(address,bool,int256,uint160,bytes) (contracts/UniswapV3Pool.sol#596-788): |
0x79dc831d556954fbc37615a711df16b0b61df083
|
$53,502.93 |
no
|
—
|
3 months ago
|
019bb2d5-fdb8-71af-9ad3-52efee4acf59
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.collectProtocol(address,uint128,uint128) (contracts/UniswapV3Pool.sol#848-868): |
0x79dc831d556954fbc37615a711df16b0b61df083
|
$53,502.93 |
no
|
—
|
3 months ago
|
019bb2d5-fdb8-71af-9ad3-52efee4acf59
|
|
medium
|
codex |
Computed external CALLs with ETH value may be reachable without strong guards |
0x69327f95182910aef8b45a1968b64a0b420178fb
|
$53,592.29 |
no
|
—
|
3 months ago
|
019bb2d5-fdaa-7097-b390-aad7f7603684
|
|
low
|
codex |
Auth guard detection absent for potentially privileged selectors |
0x69327f95182910aef8b45a1968b64a0b420178fb
|
$53,592.29 |
no
|
—
|
3 months ago
|
019bb2d5-fdaa-7097-b390-aad7f7603684
|
|
medium
|
codex |
tx.origin used in authorization guard (heuristic) |
0x3ee764c95e9d2264de3717a4cb45bcd3c5f00035
|
$53,611.14 |
no
|
—
|
3 months ago
|
019bb2d5-fda3-7027-b59f-9717a250f31d
|
|
low
|
codex |
External CALLs with computed target/value; reentrancy/unchecked-call uncertainty |
0x3ee764c95e9d2264de3717a4cb45bcd3c5f00035
|
$53,611.14 |
no
|
—
|
3 months ago
|
019bb2d5-fda3-7027-b59f-9717a250f31d
|
|
high
|
codex |
Authorization uses tx.origin (phishing/bypass risk) |
0xb233cb2f0dce57a56bf732767f45ffc8650186c5
|
$53,685.37 |
no
|
—
|
3 months ago
|
019bb2d5-fd9c-70c1-9455-bdd1d8f6cc86
|
|
medium
|
codex |
SELFDESTRUCT present; beneficiary uses tx.origin (reachability uncertain) |
0xb233cb2f0dce57a56bf732767f45ffc8650186c5
|
$53,685.37 |
no
|
—
|
3 months ago
|
019bb2d5-fd9c-70c1-9455-bdd1d8f6cc86
|
|
low
|
codex |
CREATE2 opcode present; deployment authorization unclear |
0xb233cb2f0dce57a56bf732767f45ffc8650186c5
|
$53,685.37 |
no
|
—
|
3 months ago
|
019bb2d5-fd9c-70c1-9455-bdd1d8f6cc86
|
|
medium
|
codex |
Registered exit game can permanently lock exit processing via global mutex |
0x3eed23ea148d356a72ca695dbce2fceb40a32ce0
|
$53,919.92 |
no
|
—
|
3 months ago
|
019bb2d5-fd8c-7200-a181-98b9f722917b
|
|
low
|
codex |
Early-access claims bypass per-wallet and per-transaction mint caps |
0xfdeef424c147e869a9bb2723874186f06f36b386
|
$53,940.00 |
no
|
—
|
3 months ago
|
019bb2d5-fd85-710e-8350-809272f47bd3
|
|
medium
|
codex |
Unchecked ERC6909 transfer return values enable malicious tokens to bypass payment |
0x00000000000008882d72efa6cce4b6a40b24c860
|
$53,973.10 |
no
|
—
|
3 months ago
|
019bb2d5-fd7c-72df-8b0e-fc3992167c10
|
|
medium
|
codex |
Fee-on-transfer/deflationary tokens break reserve accounting and allow pool draining |
0x00000000000008882d72efa6cce4b6a40b24c860
|
$53,973.10 |
no
|
—
|
3 months ago
|
019bb2d5-fd7c-72df-8b0e-fc3992167c10
|
|
high
|
codex |
Mint proceeds are trapped in Azaraks because PaymentSplitter never receives funds |
0x0d8f1817c644101a915852841a3b5933b0b8dcc7
|
$54,021.22 |
no
|
—
|
3 months ago
|
019bb2d5-fd73-7212-bbeb-57b641057c57
|
|
medium
|
codex |
Uninitialized signerAddress allows anyone to mint with invalid signatures |
0x0d8f1817c644101a915852841a3b5933b0b8dcc7
|
$54,021.22 |
no
|
—
|
3 months ago
|
019bb2d5-fd73-7212-bbeb-57b641057c57
|
|
low
|
codex |
Signatures lack domain separation, enabling cross-chain or cross-deployment replay |
0x0d8f1817c644101a915852841a3b5933b0b8dcc7
|
$54,021.22 |
no
|
—
|
3 months ago
|
019bb2d5-fd73-7212-bbeb-57b641057c57
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.swap(address,bool,int256,uint160,bytes) (contracts/UniswapV3Pool.sol#596-788): |
0xd823bea3b90b33c347d46664448015086dd16ed2
|
$54,036.30 |
no
|
—
|
3 months ago
|
019bb2d5-fd69-70dd-800b-cc5f366d0838
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.collectProtocol(address,uint128,uint128) (contracts/UniswapV3Pool.sol#848-868): |
0xd823bea3b90b33c347d46664448015086dd16ed2
|
$54,036.30 |
no
|
—
|
3 months ago
|
019bb2d5-fd69-70dd-800b-cc5f366d0838
|
|
medium
|
codex |
Computed external CALLs (some with ETH value) to potentially untrusted targets |
0x8cd88002dce524de8be8d49d894176e982a81cd6
|
$54,087.18 |
no
|
—
|
3 months ago
|
019bb2d5-fd60-7166-ac7b-7934f66b0e25
|
|
low
|
codex |
CREATE opcode reachable (on-chain contract deployment) |
0x8cd88002dce524de8be8d49d894176e982a81cd6
|
$54,087.18 |
no
|
—
|
3 months ago
|
019bb2d5-fd60-7166-ac7b-7934f66b0e25
|
|
medium
|
codex |
Low-level CALLs to computed targets/values without detected guards |
0x3d64bd587300af85ae54007d350bfd293dc24581
|
$54,210.42 |
no
|
—
|
3 months ago
|
019bb2d5-fd57-707f-a904-b2b419626a9c
|
|
low
|
codex |
CREATE/CREATE2 opcodes present (factory behavior) |
0x3d64bd587300af85ae54007d350bfd293dc24581
|
$54,210.42 |
no
|
—
|
3 months ago
|
019bb2d5-fd57-707f-a904-b2b419626a9c
|
|
low
|
codex |
SELFDESTRUCT opcode present in runtime bytecode (reachability unclear) |
0x3d64bd587300af85ae54007d350bfd293dc24581
|
$54,210.42 |
no
|
—
|
3 months ago
|
019bb2d5-fd57-707f-a904-b2b419626a9c
|
|
high
|
detector |
ETH value transfer possible |
0x9ee44137984af40481663744d27c5ae79210991e
|
$0.00 |
no
|
no
|
3 months ago
|
019bb2d6-484b-7238-bacf-4345a50acc70
|
|
high
|
detector |
SELFDESTRUCT reachable |
0x9ee44137984af40481663744d27c5ae79210991e
|
$0.00 |
no
|
no
|
3 months ago
|
019bb2d6-484b-7238-bacf-4345a50acc70
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0x9ee44137984af40481663744d27c5ae79210991e
|
$0.00 |
no
|
no
|
3 months ago
|
019bb2d6-484b-7238-bacf-4345a50acc70
|
|
medium
|
detector |
CREATE/CREATE2 reachable |
0x9ee44137984af40481663744d27c5ae79210991e
|
$0.00 |
no
|
no
|
3 months ago
|
019bb2d6-484b-7238-bacf-4345a50acc70
|
|
high
|
cast |
SELFDESTRUCT present |
0x9ee44137984af40481663744d27c5ae79210991e
|
$0.00 |
no
|
—
|
3 months ago
|
019bb2d6-484b-7238-bacf-4345a50acc70
|
|
low
|
cast |
Contract creation opcode present |
0x9ee44137984af40481663744d27c5ae79210991e
|
$0.00 |
no
|
—
|
3 months ago
|
019bb2d6-484b-7238-bacf-4345a50acc70
|
|
info
|
cast |
Heavy CALL-family usage |
0x9ee44137984af40481663744d27c5ae79210991e
|
$0.00 |
no
|
—
|
3 months ago
|
019bb2d6-484b-7238-bacf-4345a50acc70
|
|
info
|
cast |
Heavy EXTCODE*/BALANCE usage |
0x9ee44137984af40481663744d27c5ae79210991e
|
$0.00 |
no
|
—
|
3 months ago
|
019bb2d6-484b-7238-bacf-4345a50acc70
|
|
low
|
codex |
Rounding leaves residual funds unaccounted and permanently locked |
0xaafdfa4a935d8511bf285af11a0544ce7e4a1199
|
$54,249.81 |
no
|
—
|
3 months ago
|
019bb2d5-fd4f-7134-9797-5bc781704143
|
|
medium
|
codex |
External CALLs with computed target/value (possible arbitrary call/ETH transfer and reentrancy) |
0x7578425460c842ca077544ffe224cf213c931241
|
$54,276.19 |
no
|
—
|
3 months ago
|
019bb2d5-fd48-731a-858c-65a6ba51906e
|
|
low
|
codex |
CREATE2 reachable (arbitrary deployment possible if unguarded) |
0x7578425460c842ca077544ffe224cf213c931241
|
$54,276.19 |
no
|
—
|
3 months ago
|
019bb2d5-fd48-731a-858c-65a6ba51906e
|
|
low
|
codex |
Access-control guards not detected for likely admin/ownership selectors |
0x7578425460c842ca077544ffe224cf213c931241
|
$54,276.19 |
no
|
—
|
3 months ago
|
019bb2d5-fd48-731a-858c-65a6ba51906e
|
|
high
|
codex |
Authorization relies on tx.origin (phishable access control) |
0x00055b597e0050405b27c90d21343b1eb5b74165
|
$54,364.06 |
no
|
—
|
3 months ago
|
019bb2d5-fd3e-73af-81be-e1af5c6d5e38
|
|
medium
|
codex |
Hardcoded 1000 denominator breaks accounting when shares do not sum to 1000 |
0xe9426198aec621203ba1fe07cf292b3796ba6248
|
$54,368.27 |
no
|
—
|
3 months ago
|
019bb2d5-fd30-71f7-b28c-904f162f05ba
|
|
medium
|
codex |
Fee-on-transfer or rebasing tokens can undercollateralize remote supply |
0x3c43c421f08e2a48889ea3f75a747b7a7a366a0b
|
$54,485.54 |
no
|
—
|
3 months ago
|
019bb2d5-fd27-7219-8d7d-9d545f16545a
|
|
medium
|
detector |
ETH value transfer possible |
0x5c4afb7e23b1dc1b409dc1702f89c64527b25975
|
$0.00 |
no
|
no
|
3 months ago
|
019bb2d6-256c-7084-a43d-404bd7779c6c
|
|
medium
|
detector |
Untrusted CALL target/value reachable |
0x5c4afb7e23b1dc1b409dc1702f89c64527b25975
|
$0.00 |
no
|
no
|
3 months ago
|
019bb2d6-256c-7084-a43d-404bd7779c6c
|
|
medium
|
codex |
Unlock payload can release more than it deducts from locked balance |
0x9c6d5a71fdd306329287a835e9b8edb7f0f17898
|
$54,518.67 |
no
|
—
|
3 months ago
|
019bb2d5-fd1d-71c5-99a4-d8011bee64d6
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.swap(address,bool,int256,uint160,bytes) (contracts/UniswapV3Pool.sol#596-788): |
0xa29d18f6a73f6f65c9f0eeae2dd0563d6f615c0f
|
$54,624.06 |
no
|
—
|
3 months ago
|
019bb2d5-fd06-737e-8a9d-a5ad93185d85
|
|
medium
|
slither |
Reentrancy in UniswapV3Pool.collectProtocol(address,uint128,uint128) (contracts/UniswapV3Pool.sol#848-868): |
0xa29d18f6a73f6f65c9f0eeae2dd0563d6f615c0f
|
$54,624.06 |
no
|
—
|
3 months ago
|
019bb2d5-fd06-737e-8a9d-a5ad93185d85
|
|
medium
|
codex |
Unchecked ERC6909 transfer/transferFrom allows spoofed transfers and reserve desync |
0x000000000000040470635eb91b7ce4d132d616ed
|
$54,720.31 |
no
|
—
|
3 months ago
|
019bb2d5-fced-72a8-b292-cf03c66350e4
|
|
high
|
detector |
ETH value transfer possible |
0xb7f27e5ebf97d88f37e16eddecc59523361a60e1
|
$53,391.20 |
no
|
no
|
3 months ago
|
019bb2d5-fdd0-71ad-a2a3-7d106a06620f
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0xb7f27e5ebf97d88f37e16eddecc59523361a60e1
|
$53,391.20 |
no
|
no
|
3 months ago
|
019bb2d5-fdd0-71ad-a2a3-7d106a06620f
|
|
info
|
cast |
Heavy EXTCODE*/BALANCE usage |
0xb7f27e5ebf97d88f37e16eddecc59523361a60e1
|
$53,391.20 |
no
|
—
|
3 months ago
|
019bb2d5-fdd0-71ad-a2a3-7d106a06620f
|
|
high
|
detector |
ETH value transfer possible |
0x3e80d57929e177ebc0bbf6a08f98ea20d9b5c3e0
|
$53,457.21 |
no
|
no
|
3 months ago
|
019bb2d5-fdc8-7030-9e45-b14b77f6baec
|
|
high
|
detector |
Untrusted CALL target/value reachable |
0x3e80d57929e177ebc0bbf6a08f98ea20d9b5c3e0
|
$53,457.21 |
no
|
no
|
3 months ago
|
019bb2d5-fdc8-7030-9e45-b14b77f6baec
|
|
critical
|
detector |
Untrusted DELEGATECALL target reachable |
0x7a2330c9acb154b3df925321493c97d0056a536f
|
$53,475.99 |
no
|
no
|
3 months ago
|
019bb2d5-fdc0-71f7-85f7-e7d78f442b8a
|