Skip to content

Issues: sherlock-audit/2024-11-tally-judging

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

95 Open 18 Closed
95 Open 18 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Rough Brick Meerkat - EIP-2612 permit functionality not respected Won't Fix The sponsor confirmed this issue will not be fixed
#96 opened Dec 22, 2024 by sherlock-admin3
Real Glossy Rhino - Anyone can Withdraw staked tokens from an existing deposit on behalf of a user via withdrawOnBehalf Won't Fix The sponsor confirmed this issue will not be fixed
#95 opened Dec 22, 2024 by sherlock-admin2
Dazzling Coral Sheep - the if (_isOracleStale() || isOraclePaused) check doesnt revert when oracle is stale or paused Won't Fix The sponsor confirmed this issue will not be fixed
#94 opened Dec 22, 2024 by sherlock-admin4
Lively Arctic Robin - Lack of Delegatee Eligibility Check May Result in Successful Staking but Immediately No Rewards due to no Update in Earning Power Won't Fix The sponsor confirmed this issue will not be fixed
#93 opened Dec 22, 2024 by sherlock-admin3
Real Glossy Rhino - Anyone can Claim reward On Behalf of depositor or claimer via claimRewardOnBehalf Won't Fix The sponsor confirmed this issue will not be fixed
#92 opened Dec 22, 2024 by sherlock-admin2
Skinny Shadow Sparrow - Redundant Calculation of Total Earning Power in Delegatee Change Process Won't Fix The sponsor confirmed this issue will not be fixed
#91 opened Dec 22, 2024 by sherlock-admin4
Hidden Tweed Elephant - Reward can be lost if the Staker withdraws deposit without claiming reward Won't Fix The sponsor confirmed this issue will not be fixed
#90 opened Dec 22, 2024 by sherlock-admin3
Rich Smoke Cheetah - A mallicious bumper can take all the rewards of a user Won't Fix The sponsor confirmed this issue will not be fixed
#89 opened Dec 22, 2024 by sherlock-admin2
Skinny Shadow Sparrow - Lack of Approval for Token Transfer between Surrogates Won't Fix The sponsor confirmed this issue will not be fixed
#88 opened Dec 22, 2024 by sherlock-admin4
Able Pastel Lion - The bumpEarningPower function can't change the depositId's earning power Won't Fix The sponsor confirmed this issue will not be fixed
#87 opened Dec 22, 2024 by sherlock-admin3
Feisty Opaque Vulture - lastCheckpointTime is updated even when the totalEarningPower is zero and causes reward tokens to be stuck in the contract Won't Fix The sponsor confirmed this issue will not be fixed
#86 opened Dec 22, 2024 by sherlock-admin2
Petite Slate Orangutan - Replay Attack Vulnerability in GovernanceStakerOnBehalf.sol Won't Fix The sponsor confirmed this issue will not be fixed
#85 opened Dec 22, 2024 by sherlock-admin4
Rich Smoke Cheetah - Lack of incentives to call bumpEarningPower for small rewards Won't Fix The sponsor confirmed this issue will not be fixed
#84 opened Dec 22, 2024 by sherlock-admin3
Broad Umber Eagle - Inaccurate Reward Timestamp Calculation Won't Fix The sponsor confirmed this issue will not be fixed
#83 opened Dec 22, 2024 by sherlock-admin2
Rich Smoke Cheetah - A malicious user can pay less fees when he claim rewards Won't Fix The sponsor confirmed this issue will not be fixed
#82 opened Dec 22, 2024 by sherlock-admin4
Puny Tan Millipede - Incorrect validation check for tipping amount Won't Fix The sponsor confirmed this issue will not be fixed
#81 opened Dec 22, 2024 by sherlock-admin3
Hidden Tweed Elephant - Staker can himself call the bumpEarningPower as a bumper and earn incentive on his own deposit. Won't Fix The sponsor confirmed this issue will not be fixed
#80 opened Dec 22, 2024 by sherlock-admin2
Hidden Tweed Elephant - Non-Deposit Owners will not be able to claim rewards. Won't Fix The sponsor confirmed this issue will not be fixed
#79 opened Dec 22, 2024 by sherlock-admin4
Attractive Tin Coyote - Uninitialized immutable variable MAX_CLAIM_FEE prevents having a fee collector that receives fees Won't Fix The sponsor confirmed this issue will not be fixed
#78 opened Dec 22, 2024 by sherlock-admin3
Slow Ocean Seahorse - CREATE opcode works differently in the zkSync chain Won't Fix The sponsor confirmed this issue will not be fixed
#77 opened Dec 22, 2024 by sherlock-admin2
Skinny Shadow Sparrow - Unauthorized Delegation of Voting Power Leading to Loss of Token Control Won't Fix The sponsor confirmed this issue will not be fixed
#76 opened Dec 22, 2024 by sherlock-admin4
Large Brown Hippo - Malicious Users can withdraw more than they should thereby stealing funds Won't Fix The sponsor confirmed this issue will not be fixed
#75 opened Dec 22, 2024 by sherlock-admin3
Droll Shamrock Jaguar - Signature replay possible in GovernanceStakerOnBehalf, as chainID is not added to the signature Won't Fix The sponsor confirmed this issue will not be fixed
#74 opened Dec 22, 2024 by sherlock-admin2
Long Rouge Jay - When the deposit owner claims it, the reward is sent to the deposit owner instead of the designated deposit claimer. Won't Fix The sponsor confirmed this issue will not be fixed
#73 opened Dec 22, 2024 by sherlock-admin4
Petite Slate Orangutan - Front-Running Attack on Signature Process in GovernanceStakerOnBehalf.sol Won't Fix The sponsor confirmed this issue will not be fixed
#72 opened Dec 22, 2024 by sherlock-admin3
ProTip! Find all open issues with in progress development work with linked:pr.