code-423n4/2023-03-asymmetry-findings

Issues

• Gas Optimizations

  #1119 opened 2 years ago by code423n4
  2

• Gas Optimizations

  #1120 opened 2 years ago by code423n4
  2

• Gas Optimizations

  #1134 opened 2 years ago by code423n4
  3

• Gas Optimizations

  #1136 opened 2 years ago by code423n4
  2

• QA Report

  #1107 opened 2 years ago by code423n4
  3

• QA Report

  #1109 opened 2 years ago by code423n4
  2

• QA Report

  #1110 opened 2 years ago by code423n4
  3

• QA Report

  #1118 opened 2 years ago by code423n4
  2

• QA Report

  #1122 opened 2 years ago by code423n4
  2

• QA Report

  #1143 opened 2 years ago by code423n4
  2

• Unintentionally Locked Ether in the Contract

  #1104 opened 2 years ago by code423n4
  12

• The lack of a disposal mechanism in the SafEth.sol contract

  #1115 opened 2 years ago by code423n4
  4

• No Zero Address Check Can Lead to the Entire Project Stalling

  #1116 opened 2 years ago by code423n4
  5

• There are no restrictions on the frequency of rebalancing on the part of the owner

  #1135 opened 2 years ago by code423n4
  7

• NO VALIDATION CHECK IS PERFORMED ON THE `maxSlippage` VALUE WHEN USED FOR CALCULATIONS

  #1141 opened 2 years ago by code423n4
  2

• Upgraded Q -> 2 from #763 [1682682097179]

  #1153 opened 2 years ago by c4-judge
  2

• Upgraded Q -> 3 from #883 [1682591277339]

  #1151 opened 2 years ago by c4-judge
  3

• Upgraded Q -> 2 from #883 [1682591284215]

  #1152 opened 2 years ago by c4-judge
  2

• Upgraded Q -> 2 from #706 [1682589361421]

  #1150 opened 2 years ago by c4-judge
  2

• Upgraded Q -> 2 from #623 [1682589089611]

  #1149 opened 2 years ago by c4-judge
  2

• Upgraded Q -> 2 from #463 [1682585731493]

  #1148 opened 2 years ago by c4-judge
  2

• `sfrxETH.ethPerDerivative` is incorrect, leading to incorrect minting amount of `safETH`

  #1124 opened 2 years ago by code423n4
  5

• [M-01] Validate `onlyOwner` function inputs

  #1128 opened 2 years ago by code423n4
  4

• Upgraded Q -> 2 from #830 [1682357430454]

  #1146 opened 2 years ago by c4-judge
  2

• QA Report

  #1105 opened 2 years ago by code423n4
  2

• Incorrect allocation of staked ETH in the SafEth contract

  #1137 opened 2 years ago by code423n4
  8

• Gas Optimizations

  #1129 opened 2 years ago by code423n4
  2

• Gas Optimizations

  #1132 opened 2 years ago by code423n4
  4

• Derivative Pool Issue can Lead to Loss User Funds when Unstaking

  #1145 opened 2 years ago by code423n4
  5

• SfrxEth slippage and fee stealing

  #1108 opened 2 years ago by code423n4
  8

• the depositor can get sanwich attack when call `stake` in SafEth and `deposit` in RETH

  #1130 opened 2 years ago by code423n4
  4

• `poolPrice()` is vulnerable to price manipulation

  #1138 opened 2 years ago by code423n4
  3

• REth token price can be manipulated

  #1139 opened 2 years ago by code423n4
  3

• Reth deposit conditionally relies on unreliable price source.

  #1140 opened 2 years ago by code423n4
  4

• Reth slippage and fee stealing

  #1112 opened 2 years ago by code423n4
  9

• Reth flashloan attack

  #1125 opened 2 years ago by code423n4
  7

• WstEth slippage and fee stealing

  #1103 opened 2 years ago by code423n4
  7

• Ether Locked when Attempting to Call `stake()` during Setup

  #1113 opened 2 years ago by code423n4
  3

• Ether trapped in contract if no derivates exist

  #1127 opened 2 years ago by code423n4
  2

• Reth griefing

  #1117 opened 2 years ago by code423n4
  7

• QA Report

  #1126 opened 2 years ago by code423n4
  3

• Gas Optimizations

  #1131 opened 2 years ago by code423n4
  3

• Zero value used for `sqrtPriceLimitX96`

  #1121 opened 2 years ago by code423n4
  4

• deposit function of WstEth not working correctly

  #1111 opened 2 years ago by code423n4
  3

• Upgradeability completely breaks decentralization

  #1106 opened 2 years ago by code423n4
  5

• All the STeth balance of WstEth contract can be drained by a malicious user.

  #1123 opened 2 years ago by code423n4
  5

• Users might lose their stETH rebased reward due to the weights change

  #1114 opened 2 years ago by code423n4
  4

• All the FRX_ETH tokens of SfrxEth contract can be drained by a malicious user.

  #1133 opened 2 years ago by code423n4
  8

• WstEth.withdraw() improper implementation of slippage check

  #1142 opened 2 years ago by code423n4
  5

• Derivative Pool Issue can Lead to Loss User Funds when Unstaking

  #1144 opened 2 years ago by code423n4
  3