hats-finance/Safe-0x2909fdefd24a1ced675cb1444918fa766d76bdac

Issues

• `returndatacopy(0, 0, returndatasize())` violates `memory-safe`

  #30 opened 5 months ago
  6

• SafeWebAuthnSignerFactory.sol is prone to reorg issues.

  #29 opened 5 months ago
  6

• Attacker can brick the creation of signers rendering thr factory useless.

  #28 opened 5 months ago
  2

• Signature Malleability in WebAuthn.sol

  #27 opened 5 months ago
  7

• signature is not validated

  #26 opened 5 months ago
  1

• Incorrect Implementation of Fallback Function For Signature Verification Failure

  #25 opened 5 months ago
  8

• Use `require` instead of `assert`

  #21 opened 5 months ago
  2

• PUSH0 opcode Is Not Supported on Linea yet

  #20 opened 5 months ago
  1

• Contracts can not be deployed on BNB chain

  #19 opened 5 months ago
  5

• SafeWebAuthnSharedSigner : getConfiguration() - staticcall return data is not validated

  #18 opened 5 months ago
  4

• Usage of floating pragma

  #17 opened 5 months ago
  5

• Signature verification is not implemented for Legacy EIP-1271

  #16 opened 5 months ago
  1

• Potential Out-of-Bounds Access in `checkAuthenticatorFlags` Function

  #15 opened 5 months ago
  4

• low level staticcall return value is not checked

  #14 opened 5 months ago
  6

• Potential Memory Safety Issue in `getConfiguration` Function

  #13 opened 5 months ago
  10

• `_hasNoCode()`may behave unexpectedly

  #12 opened 5 months ago
  6

• Implicit Return Value for Invalid Signatures in ERC-1271 Compliance

  #11 opened 5 months ago
  1

• _N_DIV_2 value doesn't sync with EIP

  #10 opened 5 months ago
  1

• Frontrunning and DOS possible with signer creation in `SafeWebAuthnSignerFactory.sol`

  #9 opened 5 months ago
  10

• The 'r' Value of A Signature Should Be Within (0, n) Where 'n' is the Subgroup Order

  #8 opened 5 months ago
  2

• Inline assembly bug on 0.8.13 compiler

  #7 opened 5 months ago
  4

• `abi.encodePacked()` should not be used with dynamic types when passing the result to a hash function such as `keccak256()`

  #6 opened 5 months ago
  1

• Missing checks for `address(0)` when assigning values to address state variables

  #5 opened 5 months ago
  2

• Fallback lacking `payable`

  #4 opened 5 months ago
  1

• Does not emit event after writing into storage

  #3 opened 5 months ago
  7

• Test Hats

  #2 opened 5 months ago
  1

• Adression collision attack due to wrong salt implementation

  #1 opened 5 months ago
  3