Search results

The Restriction Manager does not completely implement ERC1404 which leads to account that are supposed to be restricted actually have access to do with their tokens as they see fit

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

M-01

bugSomething isn't workingSomething isn't working

low quality reportThis report is of especially low qualityThis report is of especially low quality

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

Status: Open.

#779 In code-423n4/2023-09-centrifuge-findings;

· c4-submissions opened on Sep 14, 2023

QA Report

Q-18

QA (Quality Assurance)Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntaxAssets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax

bugSomething isn't workingSomething isn't working

grade-a

high quality reportThis report is of especially high qualityThis report is of especially high quality

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

Status: Open.

#548 In code-423n4/2023-09-centrifuge-findings;

· c4-submissions opened on Sep 14, 2023

onlyCentrifugeChainOrigin() can't require msg.sender equal axelarGateway

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

M-02

bugSomething isn't workingSomething isn't working

downgraded by judgeJudge downgraded the risk level of this issueJudge downgraded the risk level of this issue

high quality reportThis report is of especially high qualityThis report is of especially high quality

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

Status: Open.

#537 In code-423n4/2023-09-centrifuge-findings;

· c4-submissions opened on Sep 14, 2023

Analysis

A-19

analysis-advanced

edited-by-warden

grade-a

high quality reportThis report is of especially high qualityThis report is of especially high quality

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor acknowledgedTechnically the issue is correct, but we're not going to resolve it for XYZ reasonsTechnically the issue is correct, but we're not going to resolve it for XYZ reasons

Status: Open.

#316 In code-423n4/2023-09-centrifuge-findings;

· c4-submissions opened on Sep 14, 2023

LiquidityPool::requestRedeemWithPermit transaction can be front run with the different liquidity pool

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

M-03

bugSomething isn't workingSomething isn't working

high quality reportThis report is of especially high qualityThis report is of especially high quality

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

Status: Open.

#227 In code-423n4/2023-09-centrifuge-findings;

· c4-submissions opened on Sep 13, 2023

Cached DOMAIN_SEPARATOR is incorrect for tranche tokens potentially breaking permit integrations

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

M-04

bugSomething isn't workingSomething isn't working

edited-by-warden

high quality reportThis report is of especially high qualityThis report is of especially high quality

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

Status: Open.

#146 In code-423n4/2023-09-centrifuge-findings;

· c4-submissions opened on Sep 13, 2023

You can deposit for other users really small amount to DoS them

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

M-05

bugSomething isn't workingSomething isn't working

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#143 In code-423n4/2023-09-centrifuge-findings;

· c4-submissions opened on Sep 13, 2023

Investors claiming their maxDeposit by using the LiquidityPool.deposit() will cause that other users won't be able to claim their maxDeposit/maxMint

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

M-06

bugSomething isn't workingSomething isn't working

high quality reportThis report is of especially high qualityThis report is of especially high quality

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

Status: Open.

#118 In code-423n4/2023-09-centrifuge-findings;

· c4-submissions opened on Sep 12, 2023

DelayedAdmin Cannot PauseAdmin.removePauser

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

M-07

bugSomething isn't workingSomething isn't working

edited-by-warden

low quality reportThis report is of especially low qualityThis report is of especially low quality

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

Status: Open.

#92 In code-423n4/2023-09-centrifuge-findings;

· c4-submissions opened on Sep 12, 2023

trancheTokenAmount should be rounded UP when proceeding to a withdrawal or previewing a withdrawal.

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

M-08

bugSomething isn't workingSomething isn't working

high quality reportThis report is of especially high qualityThis report is of especially high quality

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

Status: Open.

#34 In code-423n4/2023-09-centrifuge-findings;

· c4-submissions opened on Sep 10, 2023