Skip to content

Issues: sherlock-audit/2025-02-rova-judging

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

667 Open 42 Closed
667 Open 42 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Big Flaxen Dove - Malicious actor can reuse LaunchParticipationId by recalling updateParticipation
#674 opened Feb 19, 2025 by sherlock-admin2
Bumpy Tiger Hawk - Updating could not work
#673 opened Feb 19, 2025 by sherlock-admin4
Calm Ebony Lobster - Inconsistency states handling leads to user cannot re-participate after canceling participation
#672 opened Feb 19, 2025 by sherlock-admin3
Cold Sepia Raven - Any user can exploit outdated token price BPS for arbitrage
#670 opened Feb 19, 2025 by sherlock-admin3
Blunt Pearl Chinchilla - updateParticipation()
#669 opened Feb 19, 2025 by sherlock-admin2
Sleepy Heather Lynx - Missing checks in rova_sale.move in function init_module leads to unauthorized access
#668 opened Feb 19, 2025 by sherlock-admin4
Interesting Parchment Sheep - Unit Mixing Bug in Token Accounting
#667 opened Feb 19, 2025 by sherlock-admin3
Sweet Lilac Tardigrade - Incorrect token allocation adjustment in updateParticipation will cause financial loss for protocol users as attackers bypass allocation limits
#666 opened Feb 19, 2025 by sherlock-admin2
Ripe Honey Rat - Inconsistent Handling of Finalized Participations in participate Function
#665 opened Feb 19, 2025 by sherlock-admin4
Alert Clear Snake - Active Launch Group Setting Modifications Lead to Unfairness and potentially breaking the protocol
#664 opened Feb 19, 2025 by sherlock-admin3
Scrawny Gingham Cyborg - Malicious actor can steal another user's tokens
#663 opened Feb 19, 2025 by sherlock-admin2
Trendy Powder Python - Denial of Service Vulnerability in updateParticipation Due to Incorrect Comparision between TokenAmount & TokenCurrency
#662 opened Feb 19, 2025 by sherlock-admin4
Witty Pecan Aphid - Withdrawable Funds Consistency Violation Due to Outdated Balance Tracking
#661 opened Feb 19, 2025 by sherlock-admin3
Big Flaxen Dove - Malicious actor can reparticipate in FCFS
#659 opened Feb 19, 2025 by sherlock-admin3
Bumpy Tiger Hawk - Updating participation will break core functionalities
#658 opened Feb 19, 2025 by sherlock-admin2
Eager Mulberry Dog - User tokens is updated with incorrect value in the updateParticipation function.
#657 opened Feb 19, 2025 by sherlock-admin4
Refined Boysenberry Pig - Token Accounting Mismatch in updateParticipation() function
#656 opened Feb 19, 2025 by sherlock-admin3
Oblong Alabaster Blackbird - Wrong check for min/max token allocation in updateParticipation() and wrong value set to userTokens
#655 opened Feb 19, 2025 by sherlock-admin2
Small Aegean Mule - Withdrawal role will be blocked from withdrawing
#654 opened Feb 19, 2025 by sherlock-admin4
Mythical Graphite Tarantula - An unbounded loop of _launchGroups might cause withdraw to always revert
#653 opened Feb 19, 2025 by sherlock-admin3
Big Flaxen Dove - Malicious actor can pass userId == 0 to pass validation when participate() to replay launchParticipationId
#652 opened Feb 19, 2025 by sherlock-admin2
Nutty Wooden Bat - Incorrect Variable Used for Token Amount Updates in Launch.sol::updateParticipation
#651 opened Feb 19, 2025 by sherlock-admin4
Quiet Gingerbread Cottonmouth - _initialAdmin has all the roles and no provision to re-assign various roles to anyone else in the contract.
#650 opened Feb 19, 2025 by sherlock-admin3
Jovial Spruce Yak - updateParticipation is incorrectly adjusting token amounts based on currency differences, leading to incorrect accounting
#649 opened Feb 19, 2025 by sherlock-admin2
Funny Glass Aardvark - Participant ends up Paying Less for Tokens Allocation
#648 opened Feb 19, 2025 by sherlock-admin4
ProTip! no:milestone will show everything without a milestone.