본문 바로가기

Audit Report

(7)
[Audit Report] QuickSwap - 1 https://code4rena.com/reports/2022-09-quickswap Code4rena Code4rena is a competitive audit platform that finds more high-severity vulnerabilities, more quickly than any other auditing method. code4rena.com https://github.com/code-423n4/2022-09-quickswap GitHub - code-423n4/2022-09-quickswap Contribute to code-423n4/2022-09-quickswap development by creating an account on GitHub. github.com [H-01]..
[Audit Report] Particle Protocol https://code4rena.com/reports/2023-12-particle Code4rena Code4rena is a competitive audit platform that finds more high-severity vulnerabilities, more quickly than any other auditing method. code4rena.com [H-01] If the borrower enters token blacklist, LP may never be able to retrieve Liquidity 유동성을 회수하는 방법에는 두 가지가 있다. 1. borrower을 closePosition() 함수를 콜 해서 포지션 닫기 2. liquidatePosition()에서 _closePo..
[Audit Report] Lens Protocol V2 https://code4rena.com/reports/2023-07-lens Code4rena Code4rena is a competitive audit platform that finds more high-severity vulnerabilities, more quickly than any other auditing method. code4rena.com https://github.com/code-423n4/2023-07-lens GitHub - code-423n4/2023-07-lens Contribute to code-423n4/2023-07-lens development by creating an account on GitHub. github.com https://www.lens.xyz/ lens..
[Audit Report] Axelar Network (2) https://code4rena.com/reports/2023-07-axelar Code4rena Code4rena is a competitive audit platform that finds more high-severity vulnerabilities, more quickly than any other auditing method. code4rena.com [M-01] Interchain token transfer can be dossed due to flow limit 대량의 토큰 홀더는 모든 epoch가 시작될 때 수용력에 대한 흐름 제한을 사용하여 토큰을 주고받을 수 있으므로 다른 모든 사람이 시스템을 사용할 수 없게 된다. interchain token은 interchain Token serv..
[Audit Report] Axelar Network (1) https://code4rena.com/reports/2023-07-axelar Code4rena Code4rena is a competitive audit platform that finds more high-severity vulnerabilities, more quickly than any other auditing method. code4rena.com [H-01] expressReceiveToken can be abused using reenty 호출에 실행할 데이터가 포함된 경우 다른 사람을 대신해서 토큰을 빠르게 보낼 수 있다. function expressReceiveTokenWithData( // ...params ) external { if (gateway.isCommandExecute..
[Audit Report] Trader Joe v2 (2) https://code4rena.com/reports/2022-10-traderjoe#scope Code4rena Code4rena is a competitive audit platform that finds more high-severity vulnerabilities, more quickly than any other auditing method. code4rena.com [H-03] Wrong implementation of fucntion LBPair.setFeeParameter can break the funcionality of LBPair and make user's tokens locked struct FeeParameters { // 144 lowest bits in slot uint16..
[Audit Report] Trader Joe v2 (1) https://code4rena.com/reports/2022-10-traderjoe#scope Code4rena Code4rena is a competitive audit platform that finds more high-severity vulnerabilities, more quickly than any other auditing method. code4rena.com 트레이더 조 v2 의 오딧 리포트를 살펴본다. 보기 전에 트레이더 조의 프로토콜 분석 리포트 https://research.despread.io/reports-kr-traderjoe/ 길지만 정리를 상당히 잘해놔서 이해가 잘된다. 그래도 어려운 건 맞음.ㅜ 그래도 TVL은 아비트럼의 다른 프로토콜보다 낮을지라도 수익은 상당히 높은 ..