Immunefi Audit CompetitionsAlchemix
Reports by Severity
Critical
- 30634 - [SC - Critical] Unauthorized minting of unlimited FLUX in tran...
- 30650 - [SC - Critical] Infinite minting of FLUX through voterpoke
- 30651 - [SC - Critical] Insolvency in RevenueHandlersol because unclaim...
- 30655 - [SC - Critical] Binary search does not correctly handle duplica...
- 30671 - [SC - Critical] Reward token permanent freeze due to bulk call ...
- 30682 - [SC - Critical] Insufficient slippage control in RevenueHandler leads to loss of funds
- 30683 - [SC - Critical] User can increase their unclaimed Flux token wi...
- 30788 - [SC - Critical] User can increase their unclaimed Flux token wi...
- 30800 - [SC - Critical] Stealing FLUX by claiming then merging position...
- 30814 - [SC - Critical] Wrong calculation of boost amount in Voterpoke
- 30825 - [SC - Critical] Users can get unlimited amounts of Flux tokens
- 30860 - [SC - Critical] Wrong timestamp for totalVoting
- 30898 - [SC - Critical] Call the deposit function before the distribute...
- 30906 - [SC - Critical] Voterpoke can be called at will leading to a us...
- 30919 - [SC - Critical] Front running of pokeTokens could lead to loss ...
- 30925 - [SC - Critical] Manipulation of governance voting result by unlimited minting the Flux Token by exploiting the logic of reset and merge tokenId
- 30939 - [SC - Critical] Misuse of curve pool calls results for precisio...
- 30972 - [SC - Critical] Theft of unclaimed yield of the revenue in the RevenueHandler contract by claimming and merge the tokens
- 30990 - [SC - Critical] Users can use Voterpoke to accrue Flux tokens i...
- 30999 - [SC - Critical] An edge-case mints times more FLUX than it should
- 31071 - [SC - Critical] User can steal bribes and prevent other users f...
- 31076 - [SC - Critical] checkpointTotalSupply can checkpoint before a t...
- 31077 - [SC - Critical] RevenueHandler counts unclaimed tokens as new r...
- 31079 - [SC - Critical] Claiming bribes for epochs you didnt vote for l...
- 31082 - [SC - Critical] Expired locks can be used to claim rewards
- 31085 - [SC - Critical] Malicious users can front-run the distribution ...
- 31112 - [SC - Critical] Bribesolwithdraw doesnt update the totalVotings...
- 31141 - [SC - Critical] Permanent freezing of unclaimed yield of reward tokens in Bribe contract when attackers maliciously exploit voter.poke()
- 31149 - [SC - Critical] Manipulation of governance voting result by unlimited minting the Flux Token by repeatly call poke function
- 31163 - [SC - Critical] Malicious actor can acquire bribe rewards by bl...
- 31184 - [SC - Critical] Deflating the total amount of votes in a checkpoint, to steal bribes and create solvency issues
- 31196 - [SC - Critical] Voterpoke does not check lastVoted resulting in...
- 31198 - [SC - Critical] VotingEscrowmerge does not check whether the _f...
- 31199 - [SC - Critical] Users might receive less rewars token after Vot...
- 31211 - [SC - Critical] Inflation Of Total Votes and Potential Freeze o...
- 31222 - [SC - Critical] Unlimited Flux minting
- 31223 - [SC - Critical] Disproportionate Rewards Manipulation in Bribesol
- 31242 - [SC - Critical] RevenueHandlercheckpoint allows users to claim ...
- 31249 - [SC - Critical] malicious user can back-run Voterdistribute to ...
- 31253 - [SC - Critical] RevenueHandlercheckpoint isnt correctly
- 31263 - [SC - Critical] RevenueHandlercheckpoint counts unclaimed rewar...
- 31280 - [SC - Critical] Malicious user can mint unlimited flux tokens
- 31309 - [SC - Critical] slippage protection is inaccurate
- 31329 - [SC - Critical] Attacker can gain infinitive FLUX by repeating ...
- 31375 - [SC - Critical] Lack of Access control in poke function allows ...
- 31377 - [SC - Critical] Stucked yield tokens upon withdrawal of votes f...
- 31386 - [SC - Critical] Malicious user can steal FLUX token by abusing ...
- 31388 - [SC - Critical] Vulnerability in the poke function of Voting co...
- 31397 - [SC - Critical] In Bribesol _writeVotingCheckpoint isnt called ...
- 31408 - [SC - Critical] Killed Gauge continue to accrue and steal rewar...
- 31409 - [SC - Critical] Users can grief Bribe rewards forcing them to b...
- 31418 - [SC - Critical] the killed gauge collect claim amount
- 31444 - [SC - Critical] Manipulation of ve voting mechanism unlimited b...
- 31453 - [SC - Critical] The balance of RevenueHandler can be drained
- 31458 - [SC - Critical] Invalid handling of epochs revenue for tokens t...
- 31461 - [SC - Critical] veALCX holder can mint Unlimited FLUX tokens
- 31466 - [SC - Critical] Wrong reward calculation leads to rewards being...
- 31470 - [SC - Critical] Bribing protocols pay bribes but dont get emiss...
- 31472 - [SC - Critical] Stealing all revenue from the Alchemix protocol
- 31481 - [SC - Critical] Undound FLUX accrual through reset and merge
- 31483 - [SC - Critical] Users can vote multiple times in one epoch
- 31485 - [SC - Critical] Miscalculation of distributed tokens at revenue...
- 31488 - [SC - Critical] Merging tokens allows multiple Flux accruals wi...
- 31495 - [SC - Critical] Users cannot claim rewards from RevenueHandler ...
- 31507 - [SC - Critical] Malicious user could flash-loan the veALCX to i...
- 31512 - [SC - Critical] Infinite minting of FLUX through Merge
- 31520 - [SC - Critical] Incorrect accounting of totalVoting leads to pe...
- 31526 - [SC - Critical] A user is able to claim more bribes than they h...
- 31527 - [SC - Critical] No accounting for totalVoting in Bribesolwithdr...
- 31541 - [SC - Critical] FluxTokens unlimited mint and Exploitation of g...
- 31556 - [SC - Critical] Unfair Revenue Distribution in Non-Alchemix Rev...
- 31567 - [SC - Critical] VotingEscrowsolcheckpoint is completely broken
- 31579 - [SC - Critical] Infinite mint of FLUX using poke
- 31584 - [SC - Critical] Loss Of Boosted Weight When Poking In The Same ...
High
- 30699 - [SC - High] Permanent freezing of unclaimed ALCX yield when...
- 30826 - [SC - High] ALCK rewards are lost when merging tokens becau...
- 30910 - [SC - High] Processing of voting results is not implemented...
- 30922 - [SC - High] DOS of withdrawals through filling the userPoin...
- 31008 - [SC - High] Alcx rewards are permanently frozen when two to...
- 31042 - [SC - High] Claiming alchemic-token rewards can fail for so...
- 31078 - [SC - High] withdraw doesnt claim all rewards before burnin...
- 31189 - [SC - High] Voting algorithm does not apply maximum availab...
- 31258 - [SC - High] Loss of Unclaimed Bribes After Burning veALCX T...
- 31276 - [SC - High] BPT can be locked for only week resulting in u...
- 31293 - [SC - High] Voters who withdraw veLACX tokens risk losing g...
- 31295 - [SC - High] Newly created gauge may missed out on its rewards
- 31326 - [SC - High] Precision loss causes minor loss of FLUX when c...
- 31335 - [SC - High] getActualSupply should be used instead of total...
- 31380 - [SC - High] FluxTokencalculateBPT uses wrong algorithm caus...
- 31382 - [SC - High] VotingEscrow::updateUnlockTime() - It's possible for voters to update their vote tokens unlock time as many times as they wish beyond the 365 day MAX limit, violating protocol invariant.
- 31390 - [SC - High] Precision Loss in FluxTokensolgetClaimableFlux
- 31399 - [SC - High] RewardDistributor claims can be DoSed through e...
- 31435 - [SC - High] ALCX rewards arent claimed for from token when ...
- 31447 - [SC - High] veALCX holders are able to withdraw rewards and...
- 31478 - [SC - High] calculateBPT doesnt divide by basis points infl...
- 31479 - [SC - High] alchemechNFT holder will get too little FLUX be...
- 31480 - [SC - High] Miscalculation of global bias
- 31484 - [SC - High] Rewards for the first epoch at rewards distribu...
- 31486 - [SC - High] getClaimableFlux miscalculates claimable FLUX f...
- 31494 - [SC - High] Alchemix The first epochs ALCX emissions of vo...
- 31498 - [SC - High] Alchemix ALCX rewards are currently subject to...
- 31524 - [SC - High] Rounding down in getClaimableFlux leads to less...
- 31544 - [SC - High] Certain small amount of tokens are not accounte...
- 31597 - [SC - High] Loss of precision while calculating claimable f...
Medium
- 30592 - [SC - Medium] DOS attack by delegating tokens at MAX_DELEGATE...
- 30613 - [SC - Medium] malicious user can front run any call to the sw...
- 30667 - [SC - Medium] Unlimited gauge numbers can DoS users distribut...
- 30685 - [SC - Medium] The proposer can be impeded from submitting a p...
- 30704 - [SC - Medium] Griefing an account from getting votes delegate...
- 30886 - [SC - Medium] Wrong totalWeight in Votersol
- 30985 - [SC - Medium] Griefing attack prevents admins from disabling ...
- 31151 - [SC - Medium] Delegation Saturation Leading to Asset Freezing...
- 31234 - [SC - Medium] Alchemix BlockSlope variable in checkpoint rou...
- 31298 - [SC - Medium] Anyone can let users delegates reach the upper ...
- 31410 - [SC - Medium] Griefing Attack using delegate will expose User...
- 31413 - [SC - Medium] DOS attack by delegating tokens at MAX_DELEGATES
- 31425 - [SC - Medium] Users can call reset on their token even if the...
- 31448 - [SC - Medium] Bypassing the Governances proposal threshold to...
- 31462 - [SC - Medium] Alchemix addReward access control can be bypas...
- 31514 - [SC - Medium] Malicious users can cause pokeTokens to revert
- 31521 - [SC - Medium] Early return in RewardsDistributorclaim can cau...
- 31539 - [SC - Medium] The Voterdistribute function can continue to fail
- 31562 - [SC - Medium] Every consecutive epoch will have same number o...
- 31566 - [SC - Medium] Checkpoints wont update block number in point b...
- 31575 - [SC - Medium] depositIntoRewardPool and withdrawFromRewardPo...
Low
- 30555 - [SC - Low] Precision loss when calculating the FLUX amount required to ragequit for a token
- 30556 - [SC - Low] Past defeated proposals may become executable i...
- 30565 - [SC - Low] veALCX does not comply with ERC breaking compos...
- 30598 - [SC - Low] Access Control Flaw in _burn Function Leads to ...
- 30694 - [SC - Low] Users approved for a single token id cannot wit...
- 30708 - [SC - Low] treasuryPct can be exceeded than BPS due to inc...
- 30711 - [SC - Low] The result of the AggregatorVInterface is not v...
- 30781 - [SC - Low] It is possible to lower the quorum requirements that will lead to the past unmet proposals become executable
- 30818 - [SC - Low] division before multiplication in theamountToRa...
- 30920 - [SC - Low] User loses access to claims after merging of to...
- 30921 - [SC - Low] Referential assignment causes incorrect block i...
- 30926 - [SC - Low] AlchemixGovernor updates to quorum can affect p...
- 30951 - [SC - Low] Incorrect ownerOf implementation makes veALCX n...
- 30973 - [SC - Low] Incorrect Validation of treasuryPct in the Reve...
- 31087 - [SC - Low] Colition between approve and _isApprovedOrOwner...
- 31272 - [SC - Low] Approved user cant merge tokens not approved fo...
- 31281 - [SC - Low] Approved spender cannot withdraw or merge
- 31355 - [SC - Low] Past Defeated Proposals Can Be Executed in the ...
- 31381 - [SC - Low] Alchemix Incorrect Initialisation of struct in...
- 31383 - [SC - Low] price feeds sanity checks isnt correct in funct...
- 31385 - [SC - Low] RewardsDistributortokensPerWeek might be zero i...
- 31449 - [SC - Low] BribegetRewardForOwner should not revert if the...
- 31487 - [SC - Low] Wrong condition check on RevenueHandlerconstruc...
- 31497 - [SC - Low] executeBatch lacks payable so ethers can not be...
- 31519 - [SC - Low] Lack of revert statement in Votersolpoke result...
- 31523 - [SC - Low] USDT Approval will cause function failure
- 31542 - [SC - Low] Bribeearned - L Its potentially possible to ear...
- 31555 - [SC - Low] RewardsDistributoramountToCompound - L The stal...
- 31559 - [SC - Low] Minter UpdatePeriod after weeks causes Rewards...
- 31563 - [SC - Low] Oracle days staleThreshold for priceTimestamp ...
- 31588 - [SC - Low] Users could start cooldown period for their wit...
Insight
- 30584 - [SC - Insight] Invalid check to make sure Minter is already in...
- 30710 - [SC - Insight] The execution of the proposal has no expiration
- 30918 - [SC - Insight] Incorrect implementation of ownerOf makes veALC...
- 30959 - [SC - Insight] Immutable gauges can break the state of the vot...
- 30992 - [SC - Insight] Inconsistent State Missing Event Emission in Fl...
- 31080 - [SC - Insight] DoS in startCooldown when users want start cool...
- 31226 - [SC - Insight] Missing Revert Message in require statement lea...
- 31264 - [SC - Insight] Multiple Reports QALowOOS Medium
- 31277 - [SC - Insight] The user can propose with less voting power tha...
- 31284 - [SC - Insight] cancel should allow to cancel the proposal of t...
- 31407 - [SC - Insight] Alchemist is given over Allowance through Reven...
- 31416 - [SC - Insight] Impossible to set boostMultiplier to MIN_BOOST
- 31417 - [SC - Insight] Compound claiming transactions will revert if u...
- 31420 - [SC - Insight] No array lengths check in VotersolclaimBribes
- 31430 - [SC - Insight] QA
- 31443 - [SC - Insight] Incorrect values of votingDelay and votingPerio...
- 31451 - [SC - Insight] MAX_PROPOSAL_NUMERATOR is incorrectly set
- 31460 - [SC - Insight] supportsInterface does not return typeIERCRecei...
- 31503 - [SC - Insight] Incorrect value of MAX_PROPOSAL_NUMERATOR in Al...
- 31540 - [SC - Insight] Expired Token Locks Impacting Vote Weight Calcu...
- 31552 - [SC - Insight] Lack of the validation for a Flash token protec...
- 31558 - [SC - Insight] Discrepancy in MAX_PROPOSAL_NUMERATOR Value in ...
- 31583 - [SC - Insight] Off by one error while adding reward pool token
- 31592 - [SC - Insight] Collection of other important issues
- 31594 - [SC - Insight] RewardPoolManager can only add RewardPoolToken ...
Reports by Type
Smart Contract
- 30555 - [SC - Low] Precision loss when calculating the FLUX amount required to ragequit for a token
- 30556 - [SC - Low] Past defeated proposals may become executable i...
- 30565 - [SC - Low] veALCX does not comply with ERC breaking compos...
- 30584 - [SC - Insight] Invalid check to make sure Minter is already in...
- 30592 - [SC - Medium] DOS attack by delegating tokens at MAX_DELEGATE...
- 30598 - [SC - Low] Access Control Flaw in _burn Function Leads to ...
- 30613 - [SC - Medium] malicious user can front run any call to the sw...
- 30634 - [SC - Critical] Unauthorized minting of unlimited FLUX in tran...
- 30650 - [SC - Critical] Infinite minting of FLUX through voterpoke
- 30651 - [SC - Critical] Insolvency in RevenueHandlersol because unclaim...
- 30655 - [SC - Critical] Binary search does not correctly handle duplica...
- 30667 - [SC - Medium] Unlimited gauge numbers can DoS users distribut...
- 30671 - [SC - Critical] Reward token permanent freeze due to bulk call ...
- 30682 - [SC - Critical] Insufficient slippage control in RevenueHandler leads to loss of funds
- 30683 - [SC - Critical] User can increase their unclaimed Flux token wi...
- 30685 - [SC - Medium] The proposer can be impeded from submitting a p...
- 30694 - [SC - Low] Users approved for a single token id cannot wit...
- 30699 - [SC - High] Permanent freezing of unclaimed ALCX yield when...
- 30704 - [SC - Medium] Griefing an account from getting votes delegate...
- 30708 - [SC - Low] treasuryPct can be exceeded than BPS due to inc...
- 30710 - [SC - Insight] The execution of the proposal has no expiration
- 30711 - [SC - Low] The result of the AggregatorVInterface is not v...
- 30781 - [SC - Low] It is possible to lower the quorum requirements that will lead to the past unmet proposals become executable
- 30788 - [SC - Critical] User can increase their unclaimed Flux token wi...
- 30800 - [SC - Critical] Stealing FLUX by claiming then merging position...
- 30814 - [SC - Critical] Wrong calculation of boost amount in Voterpoke
- 30818 - [SC - Low] division before multiplication in theamountToRa...
- 30825 - [SC - Critical] Users can get unlimited amounts of Flux tokens
- 30826 - [SC - High] ALCK rewards are lost when merging tokens becau...
- 30860 - [SC - Critical] Wrong timestamp for totalVoting
- 30886 - [SC - Medium] Wrong totalWeight in Votersol
- 30898 - [SC - Critical] Call the deposit function before the distribute...
- 30906 - [SC - Critical] Voterpoke can be called at will leading to a us...
- 30910 - [SC - High] Processing of voting results is not implemented...
- 30918 - [SC - Insight] Incorrect implementation of ownerOf makes veALC...
- 30919 - [SC - Critical] Front running of pokeTokens could lead to loss ...
- 30920 - [SC - Low] User loses access to claims after merging of to...
- 30921 - [SC - Low] Referential assignment causes incorrect block i...
- 30922 - [SC - High] DOS of withdrawals through filling the userPoin...
- 30925 - [SC - Critical] Manipulation of governance voting result by unlimited minting the Flux Token by exploiting the logic of reset and merge tokenId
- 30926 - [SC - Low] AlchemixGovernor updates to quorum can affect p...
- 30939 - [SC - Critical] Misuse of curve pool calls results for precisio...
- 30951 - [SC - Low] Incorrect ownerOf implementation makes veALCX n...
- 30959 - [SC - Insight] Immutable gauges can break the state of the vot...
- 30972 - [SC - Critical] Theft of unclaimed yield of the revenue in the RevenueHandler contract by claimming and merge the tokens
- 30973 - [SC - Low] Incorrect Validation of treasuryPct in the Reve...
- 30985 - [SC - Medium] Griefing attack prevents admins from disabling ...
- 30990 - [SC - Critical] Users can use Voterpoke to accrue Flux tokens i...
- 30992 - [SC - Insight] Inconsistent State Missing Event Emission in Fl...
- 30999 - [SC - Critical] An edge-case mints times more FLUX than it should
- 31008 - [SC - High] Alcx rewards are permanently frozen when two to...
- 31042 - [SC - High] Claiming alchemic-token rewards can fail for so...
- 31071 - [SC - Critical] User can steal bribes and prevent other users f...
- 31076 - [SC - Critical] checkpointTotalSupply can checkpoint before a t...
- 31077 - [SC - Critical] RevenueHandler counts unclaimed tokens as new r...
- 31078 - [SC - High] withdraw doesnt claim all rewards before burnin...
- 31079 - [SC - Critical] Claiming bribes for epochs you didnt vote for l...
- 31080 - [SC - Insight] DoS in startCooldown when users want start cool...
- 31082 - [SC - Critical] Expired locks can be used to claim rewards
- 31085 - [SC - Critical] Malicious users can front-run the distribution ...
- 31087 - [SC - Low] Colition between approve and _isApprovedOrOwner...
- 31112 - [SC - Critical] Bribesolwithdraw doesnt update the totalVotings...
- 31141 - [SC - Critical] Permanent freezing of unclaimed yield of reward tokens in Bribe contract when attackers maliciously exploit voter.poke()
- 31149 - [SC - Critical] Manipulation of governance voting result by unlimited minting the Flux Token by repeatly call poke function
- 31151 - [SC - Medium] Delegation Saturation Leading to Asset Freezing...
- 31163 - [SC - Critical] Malicious actor can acquire bribe rewards by bl...
- 31184 - [SC - Critical] Deflating the total amount of votes in a checkpoint, to steal bribes and create solvency issues
- 31189 - [SC - High] Voting algorithm does not apply maximum availab...
- 31196 - [SC - Critical] Voterpoke does not check lastVoted resulting in...
- 31198 - [SC - Critical] VotingEscrowmerge does not check whether the _f...
- 31199 - [SC - Critical] Users might receive less rewars token after Vot...
- 31211 - [SC - Critical] Inflation Of Total Votes and Potential Freeze o...
- 31222 - [SC - Critical] Unlimited Flux minting
- 31223 - [SC - Critical] Disproportionate Rewards Manipulation in Bribesol
- 31226 - [SC - Insight] Missing Revert Message in require statement lea...
- 31234 - [SC - Medium] Alchemix BlockSlope variable in checkpoint rou...
- 31242 - [SC - Critical] RevenueHandlercheckpoint allows users to claim ...
- 31249 - [SC - Critical] malicious user can back-run Voterdistribute to ...
- 31253 - [SC - Critical] RevenueHandlercheckpoint isnt correctly
- 31258 - [SC - High] Loss of Unclaimed Bribes After Burning veALCX T...
- 31263 - [SC - Critical] RevenueHandlercheckpoint counts unclaimed rewar...
- 31264 - [SC - Insight] Multiple Reports QALowOOS Medium
- 31272 - [SC - Low] Approved user cant merge tokens not approved fo...
- 31276 - [SC - High] BPT can be locked for only week resulting in u...
- 31277 - [SC - Insight] The user can propose with less voting power tha...
- 31280 - [SC - Critical] Malicious user can mint unlimited flux tokens
- 31281 - [SC - Low] Approved spender cannot withdraw or merge
- 31284 - [SC - Insight] cancel should allow to cancel the proposal of t...
- 31293 - [SC - High] Voters who withdraw veLACX tokens risk losing g...
- 31295 - [SC - High] Newly created gauge may missed out on its rewards
- 31298 - [SC - Medium] Anyone can let users delegates reach the upper ...
- 31309 - [SC - Critical] slippage protection is inaccurate
- 31326 - [SC - High] Precision loss causes minor loss of FLUX when c...
- 31329 - [SC - Critical] Attacker can gain infinitive FLUX by repeating ...
- 31335 - [SC - High] getActualSupply should be used instead of total...
- 31355 - [SC - Low] Past Defeated Proposals Can Be Executed in the ...
- 31375 - [SC - Critical] Lack of Access control in poke function allows ...
- 31377 - [SC - Critical] Stucked yield tokens upon withdrawal of votes f...
- 31380 - [SC - High] FluxTokencalculateBPT uses wrong algorithm caus...
- 31381 - [SC - Low] Alchemix Incorrect Initialisation of struct in...
- 31382 - [SC - High] VotingEscrow::updateUnlockTime() - It's possible for voters to update their vote tokens unlock time as many times as they wish beyond the 365 day MAX limit, violating protocol invariant.
- 31383 - [SC - Low] price feeds sanity checks isnt correct in funct...
- 31385 - [SC - Low] RewardsDistributortokensPerWeek might be zero i...
- 31386 - [SC - Critical] Malicious user can steal FLUX token by abusing ...
- 31388 - [SC - Critical] Vulnerability in the poke function of Voting co...
- 31390 - [SC - High] Precision Loss in FluxTokensolgetClaimableFlux
- 31397 - [SC - Critical] In Bribesol _writeVotingCheckpoint isnt called ...
- 31399 - [SC - High] RewardDistributor claims can be DoSed through e...
- 31407 - [SC - Insight] Alchemist is given over Allowance through Reven...
- 31408 - [SC - Critical] Killed Gauge continue to accrue and steal rewar...
- 31409 - [SC - Critical] Users can grief Bribe rewards forcing them to b...
- 31410 - [SC - Medium] Griefing Attack using delegate will expose User...
- 31413 - [SC - Medium] DOS attack by delegating tokens at MAX_DELEGATES
- 31416 - [SC - Insight] Impossible to set boostMultiplier to MIN_BOOST
- 31417 - [SC - Insight] Compound claiming transactions will revert if u...
- 31418 - [SC - Critical] the killed gauge collect claim amount
- 31420 - [SC - Insight] No array lengths check in VotersolclaimBribes
- 31425 - [SC - Medium] Users can call reset on their token even if the...
- 31430 - [SC - Insight] QA
- 31435 - [SC - High] ALCX rewards arent claimed for from token when ...
- 31443 - [SC - Insight] Incorrect values of votingDelay and votingPerio...
- 31444 - [SC - Critical] Manipulation of ve voting mechanism unlimited b...
- 31447 - [SC - High] veALCX holders are able to withdraw rewards and...
- 31448 - [SC - Medium] Bypassing the Governances proposal threshold to...
- 31449 - [SC - Low] BribegetRewardForOwner should not revert if the...
- 31451 - [SC - Insight] MAX_PROPOSAL_NUMERATOR is incorrectly set
- 31453 - [SC - Critical] The balance of RevenueHandler can be drained
- 31458 - [SC - Critical] Invalid handling of epochs revenue for tokens t...
- 31460 - [SC - Insight] supportsInterface does not return typeIERCRecei...
- 31461 - [SC - Critical] veALCX holder can mint Unlimited FLUX tokens
- 31462 - [SC - Medium] Alchemix addReward access control can be bypas...
- 31466 - [SC - Critical] Wrong reward calculation leads to rewards being...
- 31470 - [SC - Critical] Bribing protocols pay bribes but dont get emiss...
- 31472 - [SC - Critical] Stealing all revenue from the Alchemix protocol
- 31478 - [SC - High] calculateBPT doesnt divide by basis points infl...
- 31479 - [SC - High] alchemechNFT holder will get too little FLUX be...
- 31480 - [SC - High] Miscalculation of global bias
- 31481 - [SC - Critical] Undound FLUX accrual through reset and merge
- 31483 - [SC - Critical] Users can vote multiple times in one epoch
- 31484 - [SC - High] Rewards for the first epoch at rewards distribu...
- 31485 - [SC - Critical] Miscalculation of distributed tokens at revenue...
- 31486 - [SC - High] getClaimableFlux miscalculates claimable FLUX f...
- 31487 - [SC - Low] Wrong condition check on RevenueHandlerconstruc...
- 31488 - [SC - Critical] Merging tokens allows multiple Flux accruals wi...
- 31494 - [SC - High] Alchemix The first epochs ALCX emissions of vo...
- 31495 - [SC - Critical] Users cannot claim rewards from RevenueHandler ...
- 31497 - [SC - Low] executeBatch lacks payable so ethers can not be...
- 31498 - [SC - High] Alchemix ALCX rewards are currently subject to...
- 31503 - [SC - Insight] Incorrect value of MAX_PROPOSAL_NUMERATOR in Al...
- 31507 - [SC - Critical] Malicious user could flash-loan the veALCX to i...
- 31512 - [SC - Critical] Infinite minting of FLUX through Merge
- 31514 - [SC - Medium] Malicious users can cause pokeTokens to revert
- 31519 - [SC - Low] Lack of revert statement in Votersolpoke result...
- 31520 - [SC - Critical] Incorrect accounting of totalVoting leads to pe...
- 31521 - [SC - Medium] Early return in RewardsDistributorclaim can cau...
- 31523 - [SC - Low] USDT Approval will cause function failure
- 31524 - [SC - High] Rounding down in getClaimableFlux leads to less...
- 31526 - [SC - Critical] A user is able to claim more bribes than they h...
- 31527 - [SC - Critical] No accounting for totalVoting in Bribesolwithdr...
- 31539 - [SC - Medium] The Voterdistribute function can continue to fail
- 31540 - [SC - Insight] Expired Token Locks Impacting Vote Weight Calcu...
- 31541 - [SC - Critical] FluxTokens unlimited mint and Exploitation of g...
- 31542 - [SC - Low] Bribeearned - L Its potentially possible to ear...
- 31544 - [SC - High] Certain small amount of tokens are not accounte...
- 31552 - [SC - Insight] Lack of the validation for a Flash token protec...
- 31555 - [SC - Low] RewardsDistributoramountToCompound - L The stal...
- 31556 - [SC - Critical] Unfair Revenue Distribution in Non-Alchemix Rev...
- 31558 - [SC - Insight] Discrepancy in MAX_PROPOSAL_NUMERATOR Value in ...
- 31559 - [SC - Low] Minter UpdatePeriod after weeks causes Rewards...
- 31562 - [SC - Medium] Every consecutive epoch will have same number o...
- 31563 - [SC - Low] Oracle days staleThreshold for priceTimestamp ...
- 31566 - [SC - Medium] Checkpoints wont update block number in point b...
- 31567 - [SC - Critical] VotingEscrowsolcheckpoint is completely broken
- 31575 - [SC - Medium] depositIntoRewardPool and withdrawFromRewardPo...
- 31579 - [SC - Critical] Infinite mint of FLUX using poke
- 31583 - [SC - Insight] Off by one error while adding reward pool token
- 31584 - [SC - Critical] Loss Of Boosted Weight When Poking In The Same ...
- 31588 - [SC - Low] Users could start cooldown period for their wit...
- 31592 - [SC - Insight] Collection of other important issues
- 31594 - [SC - Insight] RewardPoolManager can only add RewardPoolToken ...
- 31597 - [SC - High] Loss of precision while calculating claimable f...