π‘οΈ Security Audits Portfolio π Public Audits Project From To Platform Vulns BadgerDAO 5 Mar 2025 12 Mar 2025 Cantina H-1 Incorrect Decimal Handling in EbtcBSM Leads to Severe Exchange Rate Discrepancies Project From To Platform Vulns Nudge 17 Mar 2025 24 Mar 2025 Code4rena M-1 Lack of UUID Uniqueness Enforcement Leading to Campaign Spoofing & Data Corruption π Private Audits Project From To Company Vulns Report Uniform Bidding Market 24 Mar 2025 4 Apr 2025 Nova IMS C-1 The _clearMarket function is subject to denial of service due to an unbounded number of bids and asksC-2 The _clearMarket function does not check for canceled bids causing them to be matched anywayC-3 Incorrect sorting in sortBids leads to a flawed clearing price and erroneous settlement between bids and asks H-1 Bids that weren't supposed to be matched are matched in the _clearMarket function, causing bidders to lose their fundsH-2 Using transfer for native ETH withdrawals can prevent users from recouping their funds L-1 Missing _disableInitializers in EnergyBiddingMarket's constructor L-2 There is no way to undo the whitelisting of a seller L-3 Truncation in placeBid function is retained by the contractL-4 Bulk Bid Residuals in Multi-Hour BiddingL-5 Array-Based Bulk Bid Residuals I-1 Unused whitelistedSeller modifierI-2 Unnecessary repeated calls to assertExactHour modifier when placing bidsI-3 Unnecessary getClearingPrice functionI-4 Lack of address(0) sanity check in whitelistSeller functionI-5 Lack of event emission for state change in whitelistSeller functionI-6 Unnecessary balanceOf functionI-7 Missing bid existence checks in cancellation functions report-UniformBiddingMarket.pdf