Search results

hash - Division difference can result in a revert when claiming treasury yield and excess rewards to some users

Escalation ResolvedThis issue's escalations have been approved/rejectedThis issue's escalations have been approved/rejected

Has DuplicatesA valid issue with 1+ other issues describing the same vulnerabilityA valid issue with 1+ other issues describing the same vulnerability

MediumA valid Medium severity issueA valid Medium severity issue

RewardA payout will be made for this issueA payout will be made for this issue

Sponsor ConfirmedThe sponsor acknowledged this issue is validThe sponsor acknowledged this issue is valid

Will FixThe sponsor confirmed this issue will be fixedThe sponsor confirmed this issue will be fixed

Status: Open.

#190 In sherlock-audit/2023-11-convergence-judging;

· sherlock-admin2 opened on Nov 29, 2023

cergyk - LockingPositionDelegate::manageOwnedAndDelegated unchecked duplicate tokenId allow metaGovernance manipulation

Has DuplicatesA valid issue with 1+ other issues describing the same vulnerabilityA valid issue with 1+ other issues describing the same vulnerability

HighA valid High severity issueA valid High severity issue

RewardA payout will be made for this issueA payout will be made for this issue

Sponsor ConfirmedThe sponsor acknowledged this issue is validThe sponsor acknowledged this issue is valid

Will FixThe sponsor confirmed this issue will be fixedThe sponsor confirmed this issue will be fixed

Status: Open.

#126 In sherlock-audit/2023-11-convergence-judging;

· sherlock-admin2 opened on Nov 29, 2023

cergyk - LockPositionService::increaseLockTime Incorrect Calculation Extends Lock Duration Beyond Intended Period

Has DuplicatesA valid issue with 1+ other issues describing the same vulnerabilityA valid issue with 1+ other issues describing the same vulnerability

MediumA valid Medium severity issueA valid Medium severity issue

RewardA payout will be made for this issueA payout will be made for this issue

Sponsor ConfirmedThe sponsor acknowledged this issue is validThe sponsor acknowledged this issue is valid

Will FixThe sponsor confirmed this issue will be fixedThe sponsor confirmed this issue will be fixed

Status: Open.

#136 In sherlock-audit/2023-11-convergence-judging;

· sherlock-admin2 opened on Nov 29, 2023

0x52 - cvgControlTower and veCVG lock timing will be different and lead to yield loss scenarios

Has DuplicatesA valid issue with 1+ other issues describing the same vulnerabilityA valid issue with 1+ other issues describing the same vulnerability

MediumA valid Medium severity issueA valid Medium severity issue

RewardA payout will be made for this issueA payout will be made for this issue

Sponsor ConfirmedThe sponsor acknowledged this issue is validThe sponsor acknowledged this issue is valid

Will FixThe sponsor confirmed this issue will be fixedThe sponsor confirmed this issue will be fixed

Status: Open.

#178 In sherlock-audit/2023-11-convergence-judging;

· sherlock-admin2 opened on Nov 29, 2023

cergyk - Division by Zero in CvgRewards::_distributeCvgRewards leads to locked funds

Escalation ResolvedThis issue's escalations have been approved/rejectedThis issue's escalations have been approved/rejected

MediumA valid Medium severity issueA valid Medium severity issue

RewardA payout will be made for this issueA payout will be made for this issue

Sponsor ConfirmedThe sponsor acknowledged this issue is validThe sponsor acknowledged this issue is valid

Will FixThe sponsor confirmed this issue will be fixedThe sponsor confirmed this issue will be fixed

Status: Open.

#131 In sherlock-audit/2023-11-convergence-judging;

· sherlock-admin opened on Nov 29, 2023

ZanyBonzy - Lowering the gauge weight can disrupt accounting, potentially leading to both excessive fund distribution and a loss of funds.

Escalation ResolvedThis issue's escalations have been approved/rejectedThis issue's escalations have been approved/rejected

Has DuplicatesA valid issue with 1+ other issues describing the same vulnerabilityA valid issue with 1+ other issues describing the same vulnerability

HighA valid High severity issueA valid High severity issue

RewardA payout will be made for this issueA payout will be made for this issue

Sponsor ConfirmedThe sponsor acknowledged this issue is validThe sponsor acknowledged this issue is valid

Will FixThe sponsor confirmed this issue will be fixedThe sponsor confirmed this issue will be fixed

Status: Open.

#94 In sherlock-audit/2023-11-convergence-judging;

· sherlock-admin2 opened on Nov 29, 2023

0x52 - SdtRewardReceiver#_withdrawRewards has incorrect slippage protection and withdraws can be sandwiched

Has DuplicatesA valid issue with 1+ other issues describing the same vulnerabilityA valid issue with 1+ other issues describing the same vulnerability

MediumA valid Medium severity issueA valid Medium severity issue

RewardA payout will be made for this issueA payout will be made for this issue

Sponsor ConfirmedThe sponsor acknowledged this issue is validThe sponsor acknowledged this issue is valid

Will FixThe sponsor confirmed this issue will be fixedThe sponsor confirmed this issue will be fixed

Status: Open.

#180 In sherlock-audit/2023-11-convergence-judging;

· sherlock-admin2 opened on Nov 29, 2023

0x52 - Tokens that are both bribes and StakeDao gauge rewards will cause loss of funds

Has DuplicatesA valid issue with 1+ other issues describing the same vulnerabilityA valid issue with 1+ other issues describing the same vulnerability

HighA valid High severity issueA valid High severity issue

RewardA payout will be made for this issueA payout will be made for this issue

Sponsor ConfirmedThe sponsor acknowledged this issue is validThe sponsor acknowledged this issue is valid

Will FixThe sponsor confirmed this issue will be fixedThe sponsor confirmed this issue will be fixed

Status: Open.

#182 In sherlock-audit/2023-11-convergence-judging;

· sherlock-admin2 opened on Nov 29, 2023