Immunefi Audit CompetitionsFuel Network | Attackathon
Reports by Severity
Critical
High
- 32269 - [SC - High] Incorrect fuel dce optimization register
- 32465 - [BC - High] Abuse of CCP instruction to do cheap memo
- 32696 - [SC - High] incorrect setting of non_negative value i
- 32700 - [SC - High] double increasing underlying value in cei
- 32706 - [SC - High] the function subtract in signed libs like
- 32825 - [BC - High] Consensus between -bit and -bit system ca
- 32872 - [SC - High] Incorrect load_store_to_memcopy optimizat
- 33039 - [SC - High] The subtraction function is not correctly
- 33168 - [SC - High] Incorrect Sign Determination In Multiply
- 33175 - [SC - High] Sway-lib Subtract i Logic Vulnerability
- 33195 - [SC - High] Incorrect Calculations in Subtraction Fun
- 33227 - [SC - High] Lack of overflow protection in the pow fu
- 33242 - [SC - High] Incorrect Implementation of IFP Multiply
- 33248 - [SC - High] Incorrect Implementation of IFP Floor and
- 33267 - [SC - High] Bug in Multiply and Divide function
- 33331 - [SC - High] Overflow in Types Less Than u
Medium
- 32271 - [BC - Medium] Incorrect state range access helper
- 32275 - [SC - Medium] Various Sway Libs Bugs
- 32486 - [BC - Medium] Public RPC node craches via GraphQL API
- 32628 - [BC - Medium] A GraphQL query crashes core process
- 32768 - [BC - Medium] WDCM and WQCM doesnt respect the fuel-s
- 32884 - [SC - Medium] Compilerstd-lib storage collison betwee
- 32886 - [SC - Medium] Incorrect function purity check
- 32973 - [SC - Medium] Impl block dependency overwriting
- 33170 - [SC - Medium] UFP Exp In Sway-lib Logic Vulnerability
- 33186 - [SC - Medium] _compute_bytecode_root goes to an infin
- 33193 - [BC - Medium] Fuel SDKs ABI Decoder Behaves Different
- 33233 - [SC - Medium] Incorrect Implementation of Unsigned -b
- 33302 - [SC - Medium] Exp function does not work correctly
- 33303 - [SC - Medium] Incorrect sign change
- 33360 - [BC - Medium] The typescript SDK has no awareness of
- 33451 - [SC - Medium] Incorrect code size estimation can bypa
- 33488 - [SC - Medium] Insecure implementation of StorageMap c
Low
- 32270 - [SC - Low] Inappropriate fuel dce on side affects
- 32302 - [SC - Low] Src ContractConfigurables hash collision
- 32327 - [W&A - Low] REVISED Malicious Downtime via
- 32388 - [SC - Low] Buffer overflow in EncodeBufferAppend intr
- 32390 - [SC - Low] Unchecked Virtual Immediate Construction O
- 32438 - [SC - Low] Unhandled Bailout During AbstractInstructi
- 32439 - [SC - Low] Missing Alignment Check During AbstractIns
- 32453 - [SC - Low] Unhandled Side Effect During AbstractInstr
- 32459 - [W&A - Low] URGENT WEB funds drained using
- 32491 - [SC - Low] Incorrect PushA PopA Mask Calculation
- 32537 - [SC - Low] Different data types can be used when init
- 32548 - [SC - Low] Uncaught Integer Overflow During AbstractI
- 32612 - [SC - Low] Lack of slot hashing at adminsw can cause
- 32673 - [SC - Low] Missing array length check for non constan
- 32703 - [SC - Low] Unexpected variable shadowing during ir ge
- 32728 - [SC - Low] Incorrect literal type inference
- 32730 - [SC - Low] The Sway compiler currently disallows read
- 32786 - [SC - Low] incorrect set of i bits to which it should
- 32812 - [SC - Low] Sway-libSRC- Buffer overflow in swap_confi
- 32849 - [SC - Low] Insufficient array construction element ty
- 32854 - [SC - Low] Sway-libstd-libcompiler Storage collision
- 32859 - [SC - Low] Incorrect argument pointer creation
- 32979 - [SC - Low] operations with StorageVec incorrectly rev
- 33045 - [SC - Low] Compiler Dead Code Elimination inconsisten
- 33239 - [SC - Low] Incorrect Implementation of IFP Min Functi
- 33295 - [SC - Low] Bug in array decoding can lead to critical
- 33346 - [BC - Low] Incorrect error handling when executing bl
- 33433 - [SC - Low] Self-append in Bytes data structure causes
Insight
- 32276 - [SC - Insight] wrong implementation in gt and lt func
- 32291 - [BC - Insight] Profiling is incorrect for dependent g
- 32314 - [SC - Insight] Missing _disableInitializers in FuelER
- 32378 - [SC - Insight] Missing Zero-Check for Recipient Addre
- 32412 - [SC - Insight] the IFP divide functions does not have
- 32536 - [SC - Insight] The control flow graph is incorrectly
- 32695 - [BC - Insight] increasing processing for public nodes
- 32835 - [SC - Insight] sway compiler doesnt prevent function
- 32860 - [BC - Insight] Resource Abuse CCP instruction is load
- 32924 - [SC - Insight] sways legacy storage namespacing is br
- 32935 - [SC - Insight] Insufficient trait duplication check
- 32937 - [SC - Insight] Fallback function can be directly call
- 32938 - [SC - Insight] Insufficient declaration shadowing che
- 32978 - [BC - Insight] isolating the node from the networkcau
- 32987 - [BC - Insight] Sending a message with ETH and data to
- 33101 - [SC - Insight] Associated functions that were impleme
- 33139 - [SC - Insight] Unreachable panic in sway compiler whe
- 33140 - [SC - Insight] Sway compiler crash when compile malic
- 33171 - [SC - Insight] panic on unwrapping in decl_to_type_in
- 33172 - [SC - Insight] OOB in type_check_analyze of ImplTrait
- 33181 - [SC - Insight] users messages might encode incorrect
- 33191 - [SC - Insight] Sway Formatting Behaves Differently Ba
- 33203 - [SC - Insight] function inlining doesnt consider asm
- 33207 - [SC - Insight] users created message when withdrawing
- 33240 - [SC - Insight] Incorrect Bitness in IFP Types
- 33286 - [SC - Insight] panic on unwrapping in type_check_trai
- 33401 - [SC - Insight] insight compiler crash - trait dummy m
- 33407 - [SC - Insight] Missing Zero-Check for to Address in w
- 33444 - [SC - Insight] Sway compiler crash for access out-of-
- 33450 - [BC - Insight] fuel_gas_price_algorithm AlgorithmV ma
- 33487 - [SC - Insight] Flags Do Not Affect Types Less Than u
Reports by Type
Smart Contract
- 32269 - [SC - High] Incorrect fuel dce optimization register
- 32270 - [SC - Low] Inappropriate fuel dce on side affects
- 32275 - [SC - Medium] Various Sway Libs Bugs
- 32276 - [SC - Insight] wrong implementation in gt and lt func
- 32302 - [SC - Low] Src ContractConfigurables hash collision
- 32314 - [SC - Insight] Missing _disableInitializers in FuelER
- 32378 - [SC - Insight] Missing Zero-Check for Recipient Addre
- 32388 - [SC - Low] Buffer overflow in EncodeBufferAppend intr
- 32390 - [SC - Low] Unchecked Virtual Immediate Construction O
- 32412 - [SC - Insight] the IFP divide functions does not have
- 32438 - [SC - Low] Unhandled Bailout During AbstractInstructi
- 32439 - [SC - Low] Missing Alignment Check During AbstractIns
- 32453 - [SC - Low] Unhandled Side Effect During AbstractInstr
- 32491 - [SC - Low] Incorrect PushA PopA Mask Calculation
- 32536 - [SC - Insight] The control flow graph is incorrectly
- 32537 - [SC - Low] Different data types can be used when init
- 32548 - [SC - Low] Uncaught Integer Overflow During AbstractI
- 32612 - [SC - Low] Lack of slot hashing at adminsw can cause
- 32673 - [SC - Low] Missing array length check for non constan
- 32696 - [SC - High] incorrect setting of non_negative value i
- 32700 - [SC - High] double increasing underlying value in cei
- 32703 - [SC - Low] Unexpected variable shadowing during ir ge
- 32706 - [SC - High] the function subtract in signed libs like
- 32728 - [SC - Low] Incorrect literal type inference
- 32730 - [SC - Low] The Sway compiler currently disallows read
- 32786 - [SC - Low] incorrect set of i bits to which it should
- 32812 - [SC - Low] Sway-libSRC- Buffer overflow in swap_confi
- 32835 - [SC - Insight] sway compiler doesnt prevent function
- 32849 - [SC - Low] Insufficient array construction element ty
- 32854 - [SC - Low] Sway-libstd-libcompiler Storage collision
- 32859 - [SC - Low] Incorrect argument pointer creation
- 32872 - [SC - High] Incorrect load_store_to_memcopy optimizat
- 32884 - [SC - Medium] Compilerstd-lib storage collison betwee
- 32886 - [SC - Medium] Incorrect function purity check
- 32924 - [SC - Insight] sways legacy storage namespacing is br
- 32935 - [SC - Insight] Insufficient trait duplication check
- 32937 - [SC - Insight] Fallback function can be directly call
- 32938 - [SC - Insight] Insufficient declaration shadowing che
- 32973 - [SC - Medium] Impl block dependency overwriting
- 32979 - [SC - Low] operations with StorageVec incorrectly rev
- 33039 - [SC - High] The subtraction function is not correctly
- 33045 - [SC - Low] Compiler Dead Code Elimination inconsisten
- 33101 - [SC - Insight] Associated functions that were impleme
- 33139 - [SC - Insight] Unreachable panic in sway compiler whe
- 33140 - [SC - Insight] Sway compiler crash when compile malic
- 33168 - [SC - High] Incorrect Sign Determination In Multiply
- 33170 - [SC - Medium] UFP Exp In Sway-lib Logic Vulnerability
- 33171 - [SC - Insight] panic on unwrapping in decl_to_type_in
- 33172 - [SC - Insight] OOB in type_check_analyze of ImplTrait
- 33175 - [SC - High] Sway-lib Subtract i Logic Vulnerability
- 33181 - [SC - Insight] users messages might encode incorrect
- 33186 - [SC - Medium] _compute_bytecode_root goes to an infin
- 33191 - [SC - Insight] Sway Formatting Behaves Differently Ba
- 33195 - [SC - High] Incorrect Calculations in Subtraction Fun
- 33203 - [SC - Insight] function inlining doesnt consider asm
- 33207 - [SC - Insight] users created message when withdrawing
- 33227 - [SC - High] Lack of overflow protection in the pow fu
- 33233 - [SC - Medium] Incorrect Implementation of Unsigned -b
- 33239 - [SC - Low] Incorrect Implementation of IFP Min Functi
- 33240 - [SC - Insight] Incorrect Bitness in IFP Types
- 33242 - [SC - High] Incorrect Implementation of IFP Multiply
- 33248 - [SC - High] Incorrect Implementation of IFP Floor and
- 33267 - [SC - High] Bug in Multiply and Divide function
- 33286 - [SC - Insight] panic on unwrapping in type_check_trai
- 33295 - [SC - Low] Bug in array decoding can lead to critical
- 33302 - [SC - Medium] Exp function does not work correctly
- 33303 - [SC - Medium] Incorrect sign change
- 33331 - [SC - High] Overflow in Types Less Than u
- 33351 - [SC - Critical] ABI supertraits methods are available
- 33401 - [SC - Insight] insight compiler crash - trait dummy m
- 33407 - [SC - Insight] Missing Zero-Check for to Address in w
- 33433 - [SC - Low] Self-append in Bytes data structure causes
- 33444 - [SC - Insight] Sway compiler crash for access out-of-
- 33451 - [SC - Medium] Incorrect code size estimation can bypa
- 33487 - [SC - Insight] Flags Do Not Affect Types Less Than u
- 33488 - [SC - Medium] Insecure implementation of StorageMap c
- 33519 - [SC - Critical] Silent Stack overflow on variables be
Blockchain/DLT
- 32271 - [BC - Medium] Incorrect state range access helper
- 32291 - [BC - Insight] Profiling is incorrect for dependent g
- 32465 - [BC - High] Abuse of CCP instruction to do cheap memo
- 32486 - [BC - Medium] Public RPC node craches via GraphQL API
- 32628 - [BC - Medium] A GraphQL query crashes core process
- 32695 - [BC - Insight] increasing processing for public nodes
- 32768 - [BC - Medium] WDCM and WQCM doesnt respect the fuel-s
- 32825 - [BC - High] Consensus between -bit and -bit system ca
- 32860 - [BC - Insight] Resource Abuse CCP instruction is load
- 32965 - [BC - Critical] Messages to L included even on revert
- 32978 - [BC - Insight] isolating the node from the networkcau
- 32987 - [BC - Insight] Sending a message with ETH and data to
- 33193 - [BC - Medium] Fuel SDKs ABI Decoder Behaves Different
- 33346 - [BC - Low] Incorrect error handling when executing bl
- 33360 - [BC - Medium] The typescript SDK has no awareness of
- 33450 - [BC - Insight] fuel_gas_price_algorithm AlgorithmV ma