| high |
slither |
TruthBridge.uniswapV3SwapCallback(int256,int256,bytes) (contracts/TruthBridge.sol#341-349) ignores return value by IERC20(usdc).transfer(msg.sender,uint256(amount0Delta)) (contr... |
no
|
—
|
| high |
codex |
Relayer refund can be reentered to withdraw multiple times |
no
|
—
|
| high |
detector |
Untrusted DELEGATECALL target reachable |
no
|
no
|
| high |
slither |
TruthBridge.relayerLift(uint256,uint256,address,uint8,bytes32,bytes32,bool) (contracts/TruthBridge.sol#289-304) uses arbitrary from in transferFrom in combination with permit: I... |
no
|
—
|
| high |
slither |
TruthBridge.relayerLower(uint256,bytes,bool) (contracts/TruthBridge.sol#308-329) ignores return value by IERC20(usdc).transfer(user,amount) (contracts/TruthBridge.sol#323-324) |
no
|
—
|
| high |
slither |
TruthBridge.relayerLift(uint256,uint256,address,uint8,bytes32,bytes32,bool) (contracts/TruthBridge.sol#289-304) ignores return value by IERC20(usdc).transferFrom(user,address(th... |
no
|
—
|
| high |
slither |
TruthBridge.deregisterRelayer(address) (contracts/TruthBridge.sol#276-285) ignores return value by IERC20(usdc).transfer(relayer,uint256(balance - 1)) (contracts/TruthBridge.sol... |
no
|
—
|
| medium |
slither |
Reentrancy in TruthBridge.relayerLower(uint256,bytes,bool) (contracts/TruthBridge.sol#308-329): |
no
|
—
|
| medium |
codex |
Author confirmations and lower proofs lack domain separation (replayable signatures) |
no
|
—
|
| medium |
slither |
Reentrancy in TruthBridge.relayerLift(uint256,uint256,address,uint8,bytes32,bytes32,bool) (contracts/TruthBridge.sol#289-304): |
no
|
—
|
| medium |
slither |
Reentrancy in TruthBridge.relayerLower(uint256,bytes,bool) (contracts/TruthBridge.sol#308-329): |
no
|
—
|
| medium |
slither |
Reentrancy in TruthBridge.relayerLift(uint256,uint256,address,uint8,bytes32,bytes32,bool) (contracts/TruthBridge.sol#289-304): |
no
|
—
|
| medium |
cast |
DELEGATECALL present |
no
|
—
|
| medium |
detector |
Untrusted CALL target/value reachable |
no
|
no
|
| medium |
detector |
ETH value transfer possible |
no
|
no
|
| low |
codex |
Pause bypass for relayer operations |
no
|
—
|
| low |
codex |
Chainlink price used without sanity or staleness checks |
no
|
—
|
| low |
codex |
Unchecked ERC20 transfer return values |
no
|
—
|
| info |
cast |
Heavy CALL-family usage |
no
|
—
|
| info |
cast |
Heavy EXTCODE*/BALANCE usage |
no
|
—
|