Skip to content

Issues: sherlock-audit/2025-01-aave-v3-3-judging

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

201 Open 8 Closed
201 Open 8 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Glamorous Admiral Sloth - in _upgradeTokenImplementation proxyAddress should be payable.
#207 opened Jan 22, 2025 by sherlock-admin2
Clever Garnet Jaguar - Active collaterals with zero LTV will prevent deficit formation
#206 opened Jan 22, 2025 by sherlock-admin4
Mini Indigo Yak - Borrowers are able to DOS liquidations
#205 opened Jan 22, 2025 by sherlock-admin3
Suave Pink Condor - Lack of Validation for Liquidation Thresholds
#204 opened Jan 22, 2025 by sherlock-admin2
Clever Garnet Jaguar - Liquidator can avoid resolving bad debt with dust supply/transfer while seizing all the borrower's collateral Won't Fix The sponsor confirmed this issue will not be fixed
#203 opened Jan 22, 2025 by sherlock-admin4
Clever Garnet Jaguar - Deficit is ignored as if it wasn't ever borrowed in IRM supply-demand logic, so interest rates will be shifted downwards over time
#202 opened Jan 22, 2025 by sherlock-admin3
Glamorous Admiral Sloth - validateLiquidationCall is wrongly implemented.
#201 opened Jan 22, 2025 by sherlock-admin2
Suave Pink Condor - Incorrect Collateral to Debt Conversion
#200 opened Jan 22, 2025 by sherlock-admin4
Fast Pink Crow - Users should not be able to liquidate themselves when there are bad debt on their positions
#199 opened Jan 22, 2025 by sherlock-admin3
Clever Garnet Jaguar - Liquidators can routinely leave deficit not formed setting gas cost to cover normal liquidations only Sponsor Disputed The sponsor disputed this issue's validity Won't Fix The sponsor confirmed this issue will not be fixed
#197 opened Jan 22, 2025 by sherlock-admin3
Slow Tweed Falcon - Unexpected Excess of Reserve AToken
#196 opened Jan 22, 2025 by sherlock-admin2
Macho Tartan Finch - Liquidation with 100% close factor is still possible even if HF is greater than 0.95 and both collateral and debt worth in base currency higher than MIN_BASE_MAX_CLOSE_FACTOR_THRESHOLD
#195 opened Jan 22, 2025 by sherlock-admin4
Trendy Ceramic Worm - Grace period set on reserves will affect correct liquidations after MIN_LEFTOVER_BASE introduction
#194 opened Jan 22, 2025 by sherlock-admin3
Fast Scarlet Beaver - Attackers will corrupt user configuration state through parallel transactions
#193 opened Jan 22, 2025 by sherlock-admin2
Quick Plastic Crane - Incorrect Supply Cap Verification Due to Mixing Scaled and Unscaled Values
#192 opened Jan 22, 2025 by sherlock-admin4
Fast Scarlet Beaver - Attackers can manipulate interest rates through supply/borrow cycling
#191 opened Jan 22, 2025 by sherlock-admin3
Macho Tartan Finch - Liquidation is not possible in certain conditions with eMode
#190 opened Jan 22, 2025 by sherlock-admin2
Fast Scarlet Beaver - Attackers can bypass isolation mode debt ceiling
#189 opened Jan 22, 2025 by sherlock-admin4
Fast Steel Cormorant - Debt Unit Mismatch Leading to Dust Accumulation
#188 opened Jan 22, 2025 by sherlock-admin3
Fast Scarlet Beaver - Attackers can manipulate oracle prices through flash loans
#187 opened Jan 22, 2025 by sherlock-admin2
Quick Plastic Crane - Exploit Potential via Arbitrary EMode Category Switching
#186 opened Jan 22, 2025 by sherlock-admin4
Alert Lead Wolverine - Unauthorized Access to Deficit Elimination Logic Bypasses Umbrella Entity Control
#185 opened Jan 22, 2025 by sherlock-admin3
Beautiful Lace Puma - Vulnerability in initialize() Function of Pool.sol
#184 opened Jan 22, 2025 by sherlock-admin2
Fast Scarlet Beaver - Event ordering manipulation enables MEV and state inconsistencies
#183 opened Jan 22, 2025 by sherlock-admin4
Little Lead Barracuda - Current bad debt mechanism allows for gas griefing.
#182 opened Jan 22, 2025 by sherlock-admin3
ProTip! Follow long discussions with comments:>50.