Skip to content

Issues: sherlock-audit/2024-11-nounsdao-judging

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

187 Open 28 Closed
187 Open 28 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

OlaHamid - Denial of Service in cancelStreams Due to Single Failing nounId
#188 opened Nov 30, 2024 by sherlock-admin4
wickie - Not using nonReentrant modifer, although inherited from ReentrancyGuardUpgradable allows reentrancy.
#187 opened Nov 30, 2024 by sherlock-admin3
OlaHamid - Key Collision in ethStreamEndingAtTick Mapping Allows Miscalculation of ETH Streaming Balances
#186 opened Nov 30, 2024 by sherlock-admin2
OlaHamid - Denial of Service in cancelStreams Function due to Ownership Check Failure
#185 opened Nov 30, 2024 by sherlock-admin4
hyh - Stream cancellation functionality for all old nouns can be disabled via proposal Will Fix The sponsor confirmed this issue will be fixed
#184 opened Nov 30, 2024 by sherlock-admin3
1
bareli - wrong implement of fastForwardStream
#183 opened Nov 30, 2024 by sherlock-admin2
0xLeveler - using transfer will cause rescueToken to fail for some tokens
#181 opened Nov 30, 2024 by sherlock-admin2
MohammadX2049 - Stuck Funds in StreamEscrow Due to Lack of Periodic forwardAll() Calls
#180 opened Nov 30, 2024 by sherlock-admin4
OlaHamid - **Improper Implementation of Upgradable Contract Design in AuctionHouse Contract**
#179 opened Nov 30, 2024 by sherlock-admin3
wickie - Using transferFrom() can lock NFTs in a contract when settling auctions.
#178 opened Nov 30, 2024 by sherlock-admin2
hyh - Streaming can be effectively disabled for all the new sales by parameter manipulation
#177 opened Nov 30, 2024 by sherlock-admin4
0xKann - ETH Must Be 100% Wrapped to WETH to be able to rescueToken
#176 opened Nov 30, 2024 by sherlock-admin3
OlaHamid - **Denial of Service (DoS) via Excessive Gas Consumption in warmUpSettlementState IN THE NounsAuctionHouseV2 AND NounsAuctionHouseV2.sol CONTRACTS **
#175 opened Nov 30, 2024 by sherlock-admin2
hyh - ethRecipient can cancel and create streams with lagged currentTick, can brick StreamEscrow Will Fix The sponsor confirmed this issue will be fixed
#174 opened Nov 30, 2024 by sherlock-admin4
1
Artur - Lack of Emergency Control in Auction House Bidding Functions
#173 opened Nov 30, 2024 by sherlock-admin3
parzival - Any non-minter address can pause the contract causing DOS for sometime (until unpaused by admin)
#172 opened Nov 30, 2024 by sherlock-admin2
0xKann - Lack of WETH Handling in StreamEscrow Contract
#171 opened Nov 30, 2024 by sherlock-admin4
SoulReaper33 - Previous bidder will not get a refund in some cases
#170 opened Nov 30, 2024 by sherlock-admin3
Alpha - Miscalculation in Ticks in forwardAll() Results in Significant Loss to the protocol
#169 opened Nov 30, 2024 by sherlock-admin2
rsam_eth - Possible greifing of auctions at no cost if immediateTreasuryBPs is 0
#168 opened Nov 30, 2024 by sherlock-admin4
Pablo - DAO won't receive full ETH streams in edge case
#167 opened Nov 30, 2024 by sherlock-admin3
Damola0x - There could be a malicious takeover of NounsAuctionHouseV2.sol and NounsAuctionHouseV3.sol due to missing disableinitializers() in constructor
#166 opened Nov 30, 2024 by sherlock-admin2
krot-0025 - Lack of EOA check for Noun owner leads to potential vulnerability
#165 opened Nov 30, 2024 by sherlock-admin4
0xCTTTTTTT - Attacker will control auction mechanism through proxy reinitialization for all Nouns bidders
#164 opened Nov 30, 2024 by sherlock-admin3
SoulReaper33 - Malicious owner will not be able to cancel the stream of their noun(StreamEscrow::cancelStream)
#163 opened Nov 30, 2024 by sherlock-admin2
ProTip! What’s not been updated in a month: updated:<2024-11-25.