This repository has been archived by the owner on Mar 10, 2024. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 3
Issues: sherlock-audit/2023-08-symmetrical-judging
Author
Label
Projects
Milestones
Assignee
Sort
Issues list
nobody2018 - PartyBFacetImpl.chargeFundingRate should check whether quoteIds is empty array to prevent partyANonces from being increased, causing some operations of partyA to fail
Escalation Resolved
This issue's escalations have been approved/rejected
Medium
A valid Medium severity issue
Reward
A payout will be made for this issue
Sponsor Confirmed
The sponsor acknowledged this issue is valid
Will Fix
The sponsor confirmed this issue will be fixed
#41
opened Sep 4, 2023 by
sherlock-admin
panprog - MultiAccount A valid issue with 1+ other issues describing the same vulnerability
Medium
A valid Medium severity issue
Reward
A payout will be made for this issue
Sponsor Confirmed
The sponsor acknowledged this issue is valid
Will Fix
The sponsor confirmed this issue will be fixed
depositAndAllocateForAccount
function doesn't scale the allocated amount correctly, failing to allocate enough funds
Has Duplicates
#15
opened Sep 4, 2023 by
sherlock-admin
panprog - Position value can fall below minimum acceptable quote value when partially closing positions requested to be closed in full
Medium
A valid Medium severity issue
Reward
A payout will be made for this issue
Sponsor Confirmed
The sponsor acknowledged this issue is valid
Will Fix
The sponsor confirmed this issue will be fixed
#12
opened Sep 4, 2023 by
sherlock-admin2
panprog - Position closure might always revert in some cases due to allocatedBalances being unsigned, preventing the user from closing its positions
Escalation Resolved
This issue's escalations have been approved/rejected
Medium
A valid Medium severity issue
Reward
A payout will be made for this issue
Sponsor Confirmed
The sponsor acknowledged this issue is valid
Won't Fix
The sponsor confirmed this issue will not be fixed
#10
opened Sep 4, 2023 by
sherlock-admin2
panprog - Wrong calculation of solvency in A valid issue with 1+ other issues describing the same vulnerability
Medium
A valid Medium severity issue
Reward
A payout will be made for this issue
Sponsor Confirmed
The sponsor acknowledged this issue is valid
Will Fix
The sponsor confirmed this issue will be fixed
fillCloseRequest
prevents the position from being closed even if the user is solvent after position closure
Has Duplicates
#9
opened Sep 4, 2023 by
sherlock-admin
panprog - A valid issue with 1+ other issues describing the same vulnerability
High
A valid High severity issue
Reward
A payout will be made for this issue
Sponsor Confirmed
The sponsor acknowledged this issue is valid
Will Fix
The sponsor confirmed this issue will be fixed
liquidatePositionsPartyA
limits partyB loss to partyB allocated balance, which can lead to inflated partyB balance and loss of funds for protocol users
Has Duplicates
#6
opened Sep 4, 2023 by
sherlock-admin2
panprog - A valid issue with 1+ other issues describing the same vulnerability
High
A valid High severity issue
Reward
A payout will be made for this issue
Sponsor Confirmed
The sponsor acknowledged this issue is valid
Will Fix
The sponsor confirmed this issue will be fixed
liquidatePartyA
requires signature which doesn't have nonce, making possible unfair liquidation and loss of funds for all parties
Has Duplicates
#5
opened Sep 4, 2023 by
sherlock-admin
ProTip!
Add no:assignee to see everything thatβs not assigned.