| Severity | Tool | Title | Validated | Confirmed |
|---|---|---|---|---|
| high | detector | Authorization based on tx.origin | no | — |
| high | slither | StablesPool.safeBsdTransfer(address,uint256) (contracts/Contract.sol#676-685) ignores return value by bsd.transfer(_to,_bsdBal) (contracts/Contract.sol#682-683) | no | — |
| high | slither | StablesPool.safeBsdTransfer(address,uint256) (contracts/Contract.sol#676-685) ignores return value by bsd.transfer(_to,_amount) (contracts/Contract.sol#683-684) | no | — |
| medium | slither | Reentrancy in StablesPool.withdraw(uint256,uint256) (contracts/Contract.sol#645-665): | no | — |
| medium | codex | Emergency withdrawal transfers before zeroing balances | no | — |
| medium | slither | Reentrancy in StablesPool.deposit(uint256,uint256) (contracts/Contract.sol#626-645): | no | — |
| medium | slither | Reentrancy in StablesPool.withdraw(uint256,uint256) (contracts/Contract.sol#645-665): | no | — |
| medium | slither | Reentrancy in StablesPool.emergencyWithdraw(uint256) (contracts/Contract.sol#666-674): | no | — |
| medium | detector | Untrusted CALL target/value reachable | no | no |
| medium | detector | ETH value transfer possible | no | no |
| medium | codex | Reward payout before state update enables reentrancy double-claims | no | — |
| low | codex | Unchecked ERC20 return values on reward transfers | no | — |
| info | cast | Heavy EXTCODE*/BALANCE usage | no | — |
| Run ID | Status | Validated | Total findings | Created |
|---|---|---|---|---|
| 019bab3b-aa19-71a6-879c-a96e48ff592a | complete | crit 0 high 0 | 13 | 3 months ago |