Skip to content

Issues: sherlock-audit/2024-10-morpho-x-index-judging

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

56 Open 6 Closed
56 Open 6 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

momo - Interest calculation
#59 opened Oct 21, 2024 by sherlock-admin3
hack3r-0m - Mispricing in issue and redeem during ongoing rebalance
#58 opened Oct 21, 2024 by sherlock-admin2
TheBlockChainer - MorphoLeverageModule Uses Ownable Instead of Ownable2Step
#57 opened Oct 21, 2024 by sherlock-admin4
momo - Morphol.sol functions are public hence non-validated isetToken.sol can lead to Stolen Funds
#56 opened Oct 21, 2024 by sherlock-admin3
hack3r-0m - Incompability with various ERC20 supported by morpho
#53 opened Oct 21, 2024 by sherlock-admin4
momo - Magic numbers in the morpho.sol contract hardcoded to zero
#52 opened Oct 21, 2024 by sherlock-admin3
hack3r-0m - removeModule will lead to uncleared debt further leading to losses and liquidation
#51 opened Oct 21, 2024 by sherlock-admin2
ZanyBonzy - Morpho allows onBehalf repayment which can be weaponized to dos full repayment
#50 opened Oct 21, 2024 by sherlock-admin4
momo - abitrary/large data can be passed into function getSupplyCollateralCalldata
#49 opened Oct 21, 2024 by sherlock-admin3
hack3r-0m - onlyEOA modifier will not work as expected after EIP 7702
#48 opened Oct 21, 2024 by sherlock-admin2
zraxx - The exchange time is updated even when no exchange occurs.
#47 opened Oct 21, 2024 by sherlock-admin4
PNS - MorphoLeverageModule._executeTrade may not work with some tokens such as USDT
#46 opened Oct 21, 2024 by sherlock-admin3
AdamSzymanski - Use of Deprecated .transfer() Method in Ether Transfers
#45 opened Oct 21, 2024 by sherlock-admin2
AdamSzymanski - Insufficient Reentrancy Protection in ripcord Function Due to Reliance on onlyEOA Modifier
#44 opened Oct 21, 2024 by sherlock-admin4
onthehunt - rebalance() and iterateRebalance() can be DOS-ed in a particular scenario
#43 opened Oct 21, 2024 by sherlock-admin3
onthehunt - Calculation of leverage ratio is not as intended
#42 opened Oct 21, 2024 by sherlock-admin2
momo - Name Of _exchangeName In MorphoLeverageStrategyExtension.sol Is Not Unique
#41 opened Oct 21, 2024 by sherlock-admin4
karsar - transfer() will always revert for token that not return boolean value
#40 opened Oct 21, 2024 by sherlock-admin3
nikhilx0111 - incorrect slippage in _calculateMinRepayUnits
#39 opened Oct 21, 2024 by sherlock-admin2
nikhilx0111 - protcol is not compatible with morpho
#38 opened Oct 21, 2024 by sherlock-admin4
0x52 - MorphoLeverageModule#removeModule is broken and cannot be used without trapping funds Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#37 opened Oct 21, 2024 by sherlock-admin3
1
eLSeR17 - Users are likely to get confused, as units in docs/comments do not match units in the code
#36 opened Oct 21, 2024 by sherlock-admin2
nikhilx0111 - all attempts to repay will fail when borrow balance exceeds collateral amount
#35 opened Oct 21, 2024 by sherlock-admin4
Flashloan44 - Potential DOS on deleveraging which can lead to unfair liquidation
#34 opened Oct 21, 2024 by sherlock-admin3
nikhilx0111 - _calculateChunkRebalanceNotional will calculate incorrectly when the borrow balance is 0
#33 opened Oct 21, 2024 by sherlock-admin2
ProTip! Type g i on any issue or pull request to go back to the issue listing page.