Immunefi Audit CompetitionsFlare FAssets | Mitigation Audit
Reports by Severity
Low
- 54916 - [SC - Low] minting cap can be surpassed via redemption fee
- 55002 - [SC - Low] rewards claims increase pool collateral but do not notify assetmanager stale cr accounting after fix for 45893
- 55242 - [SC - Low] selfcloseexitto vulnerable to frontrunning griefing via exit
- 55208 - [SC - Low] executors receive a greater reward than the assigned value
Insight
- 54887 - [SC - Insight] mitigation regression pool token suffix length excludes valid 1 and 20 char values the fix rejects valid edge lengths and breaks agent creation
- 55046 - [SC - Insight] claimed rewards paid in legacy wnat after an upgrade are silently ignored by the balance delta fix
- 54955 - [SC - Insight] malicious agents can trap stakers by raising exit collateral ratio
- 55025 - [SC - Insight] corevault refund failure can permanently freeze overpaid nat on assetmanager
- 55174 - [SC - Insight] over assignment of payable in claimairdropdistribution function could cause confusion regarding native token handling
- 55230 - [SC - Insight] there is a sub gwei executor fee can be bypass and freezes eth in redemptionrequests
- 55241 - [SC - Insight] insufficient validation of pool token suffix allows consecutive hyphens enables token symbol impersonation and user confusion
- 55049 - [SC - Insight] there is a issue related that the msg value not returned to payer in self close exit
Reports by Type
Smart Contract
- 54887 - [SC - Insight] mitigation regression pool token suffix length excludes valid 1 and 20 char values the fix rejects valid edge lengths and breaks agent creation
- 55046 - [SC - Insight] claimed rewards paid in legacy wnat after an upgrade are silently ignored by the balance delta fix
- 54955 - [SC - Insight] malicious agents can trap stakers by raising exit collateral ratio
- 55025 - [SC - Insight] corevault refund failure can permanently freeze overpaid nat on assetmanager
- 54916 - [SC - Low] minting cap can be surpassed via redemption fee
- 55002 - [SC - Low] rewards claims increase pool collateral but do not notify assetmanager stale cr accounting after fix for 45893
- 55174 - [SC - Insight] over assignment of payable in claimairdropdistribution function could cause confusion regarding native token handling
- 55230 - [SC - Insight] there is a sub gwei executor fee can be bypass and freezes eth in redemptionrequests
- 55241 - [SC - Insight] insufficient validation of pool token suffix allows consecutive hyphens enables token symbol impersonation and user confusion
- 55049 - [SC - Insight] there is a issue related that the msg value not returned to payer in self close exit
- 55242 - [SC - Low] selfcloseexitto vulnerable to frontrunning griefing via exit
- 55208 - [SC - Low] executors receive a greater reward than the assigned value