Immunefi Audit Competitions

Acre

Reports by Severity

Medium

34836 - [SC - Medium] Malicious party can make it impossible for debt to be completely repaid by donati
34712 - [SC - Medium] Malicious users can block repay debt transactions with no cost

Low

34959 - [SC - Low] mintDebt returns a wrong value
35014 - [SC - Low] Incorrect rounding in mintDebt function might allow minimal shares dilution
34978 - [SC - Low] Protocol runs insolvent due to incorrect reliance on depositBalance which doesn't match holder balances
35026 - [SC - Low] repayDebt in stbtc returns a worng value
34995 - [SC - Low] mintDebt() and repayDebt() should return assets and not shares
34672 - [SC - Low] Protocol runs insolvent due to incorrect reliance on depositBalance which doesn't ma
34999 - [SC - Low] The tBTC in the MezoAllocator itself is not considered in the withdrawal function
34748 - [SC - Low] Last withdrawer can be prevented from withdrawing their assets
34729 - [SC - Low] releaseDeposit will likely fail, putting funds in MezoAllocator at risk of being p
34851 - [SC - Low] Adversary can freeze users' fund in stBTC using donation attack on MezoAllocator

Insight

34998 - [SC - Insight] Deposited assets in an old dispatcher may be lost when swapping to a new dispatc

Reports by Type

Smart Contract