Renzo – Inability to deposit funds due to incorrect filling the withdraw buffer Under specific conditions, user deposits will always revert. Vulnerability Details When a user deposits funds through RestakeManager, the function checks the withdraw buffer and […]
Renzo – users will suffer from other projects LST price fluctuations Holders of wBETH and other tokens that will be accepted by Renzo can compensate for their losses resulting from price drop (e.g. slashing) using […]
Renzo – Enabling stETH deposits causes miscalculations and permanent losses for users as rebase tokens are not supported Loss of capital of users who withdraw stETH. Their LST rewards will be miscalculated. Vulnerability Details The general questions section in the readme.md states […]
Mento – Voting power remains despite withdrawal Full withdrawals do not decrease user voting power when the Locking contract is stopped. Vulnerability Details Under specific conditions, the owner may stop the […]
Tapioca – OFT can be impersonated through _lzCompose with multiple compose messages This vulnerability allows anyone to make a cross-chain calls with multiple compose messages, and execute the messages (all except the first one) as the […]
Tapioca – Nesting remote transfer messages to steal tokens The user can use a nested MSG_REMOTE_TRANSFER message in a valid MSG_REMOTE_TRANSFER to execute back the remote transfer as the owner of tokens (stealing […]
Tapioca – Unprotected executeModule function allows to steal the tokens The executeModule function allows anyone to execute any module with any params. That allows attacker to execute operations on behalf of other users. Vulnerability […]
Tapioca – Unverified _srcChainSender parameter allows to impersonate the sender The function executes modules depending on the _msgType parameter and some of them do not accept the _srcChainSender parameter. Vulnerability Details The _toeComposeReceiver function is called […]
Best ways to secure your X account Learn how to effectively protect your X account. Do not let hackers take control. Why is it worth taking care of it? Security is […]
