Search results

Lack of minAsset check in claimYield() and claimFees().

Q-02

QA (Quality Assurance)Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntaxAssets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax

bugSomething isn't workingSomething isn't working

disagree with severitySponsor confirms validity, but disagrees with warden’s risk assessment (sponsor explain in comments)Sponsor confirms validity, but disagrees with warden’s risk assessment (sponsor explain in comments)

downgraded by judgeJudge downgraded the risk level of this issueJudge downgraded the risk level of this issue

edited-by-warden

grade-a

insufficient quality reportThis report is not of sufficient qualityThis report is not of sufficient quality

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

sponsor disputedSponsor cannot duplicate the issue, or otherwise disagrees this is an issueSponsor cannot duplicate the issue, or otherwise disagrees this is an issue

Status: Open.

#253 In code-423n4/2024-02-spectra-findings;

· c4-bot-10 opened on Mar 1, 2024

PrincipalToken is not ERC-5095 compliant

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

🤖_33_groupAI based duplicate group recommendationAI based duplicate group recommendation

M-01

bugSomething isn't workingSomething isn't working

downgraded by judgeJudge downgraded the risk level of this issueJudge downgraded the risk level of this issue

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sponsor confirmedSponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#210 In code-423n4/2024-02-spectra-findings;

· c4-bot-7 opened on Mar 1, 2024

Users may get Yield rewards less than they should

🤖_23_groupAI based duplicate group recommendationAI based duplicate group recommendation

Q-06

QA (Quality Assurance)Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntaxAssets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax

bugSomething isn't workingSomething isn't working

downgraded by judgeJudge downgraded the risk level of this issueJudge downgraded the risk level of this issue

duplicate-253

grade-b

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#198 In code-423n4/2024-02-spectra-findings;

· c4-bot-6 opened on Mar 1, 2024

All yield generated in the IBT vault can be drained by performing a vault deflation attack using the flash loan functionality of the Principal Token contract

2 (Med Risk)Assets not at direct risk, but function/availability of the protocol could be impacted or leak valueAssets not at direct risk, but function/availability of the protocol could be impacted or leak value

🤖_62_groupAI based duplicate group recommendationAI based duplicate group recommendation

M-02

bugSomething isn't workingSomething isn't working

downgraded by judgeJudge downgraded the risk level of this issueJudge downgraded the risk level of this issue

edited-by-warden

primary issueHighest quality submission among a set of duplicatesHighest quality submission among a set of duplicates

satisfactorysatisfies C4 submission criteria; eligible for awardssatisfies C4 submission criteria; eligible for awards

selected for reportThis submission will be included/highlighted in the audit reportThis submission will be included/highlighted in the audit report

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#111 In code-423n4/2024-02-spectra-findings;

· c4-bot-9 opened on Feb 29, 2024

Flash loan caller can end up paying double the flash loaned amount

🤖_32_groupAI based duplicate group recommendationAI based duplicate group recommendation

Q-10

QA (Quality Assurance)Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntaxAssets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax

bugSomething isn't workingSomething isn't working

downgraded by judgeJudge downgraded the risk level of this issueJudge downgraded the risk level of this issue

grade-a

insufficient quality reportThis report is not of sufficient qualityThis report is not of sufficient quality

Status: Open.

#70 In code-423n4/2024-02-spectra-findings;

· c4-bot-7 opened on Feb 28, 2024

IERC4626::redeem() not according to spec and may result in loss of funds

🤖_23_groupAI based duplicate group recommendationAI based duplicate group recommendation

Q-11

QA (Quality Assurance)Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntaxAssets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax

bugSomething isn't workingSomething isn't working

downgraded by judgeJudge downgraded the risk level of this issueJudge downgraded the risk level of this issue

duplicate-253

grade-b

sufficient quality reportThis report is of sufficient qualityThis report is of sufficient quality

Status: Open.

#23 In code-423n4/2024-02-spectra-findings;

· c4-bot-2 opened on Feb 26, 2024