Skip to content

Issues: code-423n4/2023-06-lybra-findings

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

138 Open 853 Closed
138 Open 853 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

QA Report bug Something isn't working grade-b Q-01 QA (Quality Assurance) Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax sponsor confirmed Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")
#979 opened Jul 3, 2023 by code423n4
2
Gas Optimizations bug Something isn't working G (Gas Optimization) G-01 grade-b sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#977 opened Jul 3, 2023 by code423n4
2
Wrong WBETH contract address in LybraWbETHVault.sol bug Something isn't working downgraded by judge Judge downgraded the risk level of this issue duplicate-79 grade-b Q-02 QA (Quality Assurance) Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax
#960 opened Jul 3, 2023 by code423n4
2
Gas Optimizations bug Something isn't working G (Gas Optimization) G-02 grade-b sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#959 opened Jul 3, 2023 by code423n4
2
Gas Optimizations bug Something isn't working G (Gas Optimization) G-03 grade-b sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#957 opened Jul 3, 2023 by code423n4
2
QA Report bug Something isn't working grade-a Q-03 QA (Quality Assurance) Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax selected for report This submission will be included/highlighted in the audit report sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#953 opened Jul 3, 2023 by code423n4
4
Gas Optimizations bug Something isn't working G (Gas Optimization) G-04 grade-b sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#951 opened Jul 3, 2023 by code423n4
2
Analysis A-01 analysis-advanced grade-a high quality report This report is of especially high quality satisfactory satisfies C4 submission criteria; eligible for awards sponsor confirmed Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")
#948 opened Jul 3, 2023 by code423n4
4
Wrong proposalThreshold amount in LybraGovernance.sol 2 (Med Risk) Assets not at direct risk, but function/availability of the protocol could be impacted or leak value bug Something isn't working M-01 primary issue Highest quality submission among a set of duplicates satisfactory satisfies C4 submission criteria; eligible for awards selected for report This submission will be included/highlighted in the audit report sponsor confirmed Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")
#942 opened Jul 3, 2023 by code423n4
4
QA Report bug Something isn't working edited-by-warden grade-b Q-04 QA (Quality Assurance) Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#940 opened Jul 3, 2023 by code423n4
2
QA Report bug Something isn't working grade-a Q-05 QA (Quality Assurance) Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#932 opened Jul 3, 2023 by code423n4
2
Exploiter can avoid negative Lido rebases stealing funds from EUSD vaults 2 (Med Risk) Assets not at direct risk, but function/availability of the protocol could be impacted or leak value bug Something isn't working downgraded by judge Judge downgraded the risk level of this issue edited-by-warden high quality report This report is of especially high quality M-02 primary issue Highest quality submission among a set of duplicates satisfactory satisfies C4 submission criteria; eligible for awards selected for report This submission will be included/highlighted in the audit report sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#931 opened Jul 3, 2023 by code423n4
11
QA Report bug Something isn't working grade-b Q-06 QA (Quality Assurance) Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#924 opened Jul 3, 2023 by code423n4
3
Gas Optimizations bug Something isn't working G (Gas Optimization) G-05 grade-b sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#921 opened Jul 3, 2023 by code423n4
2
QA Report bug Something isn't working grade-a high quality report This report is of especially high quality Q-07 QA (Quality Assurance) Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#906 opened Jul 3, 2023 by code423n4
3
QA Report bug Something isn't working grade-b high quality report This report is of especially high quality Q-08 QA (Quality Assurance) Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#902 opened Jul 3, 2023 by code423n4
4
Gas Optimizations bug Something isn't working G (Gas Optimization) G-06 grade-a high quality report This report is of especially high quality selected for report This submission will be included/highlighted in the audit report sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#898 opened Jul 3, 2023 by code423n4
4
Gas Optimizations bug Something isn't working G (Gas Optimization) G-07 grade-a high quality report This report is of especially high quality sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#897 opened Jul 3, 2023 by code423n4
4
WstETHVault falsely wraps msg.value instead of stETH received from the Lido bug Something isn't working downgraded by judge Judge downgraded the risk level of this issue grade-b Q-09 QA (Quality Assurance) Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax satisfactory satisfies C4 submission criteria; eligible for awards sponsor disputed Sponsor cannot duplicate the issue, or otherwise disagrees this is an issue
#887 opened Jul 3, 2023 by code423n4
17
Impossibility to change safeCollateralRatio 2 (Med Risk) Assets not at direct risk, but function/availability of the protocol could be impacted or leak value bug Something isn't working high quality report This report is of especially high quality M-03 primary issue Highest quality submission among a set of duplicates satisfactory satisfies C4 submission criteria; eligible for awards selected for report This submission will be included/highlighted in the audit report sponsor confirmed Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")
#882 opened Jul 3, 2023 by code423n4
5
The EUSDMiningIncentives contract is incorrectly implemented and can allow for more than the intended amount of rewards to be minted 2 (Med Risk) Assets not at direct risk, but function/availability of the protocol could be impacted or leak value bug Something isn't working M-04 primary issue Highest quality submission among a set of duplicates satisfactory satisfies C4 submission criteria; eligible for awards selected for report This submission will be included/highlighted in the audit report sponsor confirmed Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")
#867 opened Jul 3, 2023 by code423n4
4
Hardcoded WETH address in EUSDMiningIncentives will break implementation on all chains other than Ethereum bug Something isn't working disagree with severity Sponsor confirms validity, but disagrees with warden’s risk assessment (sponsor explain in comments) downgraded by judge Judge downgraded the risk level of this issue grade-b primary issue Highest quality submission among a set of duplicates Q-10 QA (Quality Assurance) Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#864 opened Jul 3, 2023 by code423n4
7
Analysis A-02 analysis-advanced grade-a satisfactory satisfies C4 submission criteria; eligible for awards sponsor confirmed Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")
#856 opened Jul 3, 2023 by code423n4
3
Gas Optimizations bug Something isn't working G (Gas Optimization) G-08 grade-a high quality report This report is of especially high quality sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#845 opened Jul 3, 2023 by code423n4
3
Gas Optimizations bug Something isn't working G (Gas Optimization) G-09 grade-a high quality report This report is of especially high quality sponsor acknowledged Technically the issue is correct, but we're not going to resolve it for XYZ reasons
#830 opened Jul 3, 2023 by code423n4
3
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.