Immunefi Audit CompetitionsFolks: Liquid Staking
Reports by Severity
High
- 37660 - [SC - High] incorrect tracking of TOTAL_ACTIVE_STAKE leads to permanent freezing of funds
- 37661 - [SC - High] Incorrect total_active_stake reduction causes loss of funds for the users and exc
- 37775 - [SC - High] Accounting Discrepancy in consensus_v2.py::burn()can potentially cause underflow
- 37852 - [SC - High] The accumulation of rewards is being decreased from the active stake which could le
- 37863 - [SC - High] Underflow in burn method prevents all xALGO from being burnt
- 37889 - [SC - High] Underflow in burn() function will cause user funds to partially frozen
- 37903 - [SC - High] "Potential Underflow Vulnerability in burn Function for total_active_stake_key"
- 37940 - [SC - High] Freezing of user funds When Reward accumulated or added
Low
Insight
- 37768 - [SC - Insight] Missing Event Emission when proposer are added prevents safe retrieval of index
- 37791 - [SC - Insight] Consensus contract distributes Algo for proposers that are offline that cause losing of reward
- 37807 - [SC - Insight] Truncation of mint_amount to zero leading to potential stake loss
- 37854 - [SC - Insight] Missing state validation upon Upgrade
- 37864 - [SC - Insight] Over-charging users on delayed mint
- 37893 - [SC - Insight] Inflation Attack in xAlgo
Reports by Type
Smart Contract
- 37660 - [SC - High] incorrect tracking of TOTAL_ACTIVE_STAKE leads to permanent freezing of funds
- 37661 - [SC - High] Incorrect total_active_stake reduction causes loss of funds for the users and exc
- 37768 - [SC - Insight] Missing Event Emission when proposer are added prevents safe retrieval of index
- 37775 - [SC - High] Accounting Discrepancy in consensus_v2.py::burn()can potentially cause underflow
- 37791 - [SC - Insight] Consensus contract distributes Algo for proposers that are offline that cause losing of reward
- 37807 - [SC - Insight] Truncation of mint_amount to zero leading to potential stake loss
- 37852 - [SC - High] The accumulation of rewards is being decreased from the active stake which could le
- 37854 - [SC - Insight] Missing state validation upon Upgrade
- 37864 - [SC - Insight] Over-charging users on delayed mint
- 37863 - [SC - High] Underflow in burn method prevents all xALGO from being burnt
- 37867 - [SC - Low] Contract upgrade failing due to SHA256 failing because of AVM byte width limits
- 37889 - [SC - High] Underflow in burn() function will cause user funds to partially frozen
- 37903 - [SC - High] "Potential Underflow Vulnerability in burn Function for total_active_stake_key"
- 37893 - [SC - Insight] Inflation Attack in xAlgo
- 37940 - [SC - High] Freezing of user funds When Reward accumulated or added