Immunefi Audit Competitions

Immunefi Arbitration

Reports by Severity

Low

29432 - [SC - Low] Malicious project can grief reward payouts from...
29467 - [SC - Low] RewardTimelock::executeRewardTransaction() - L112: Incorrect comparison operator results in not being able to execute reward tx at the very last second of tx expiration timestamp.
29738 - [SC - Low] Missing Chainlink circuit breaker check allows ...

Insight

29318 - [SC - Insight] Timelock contract should use canExecuteTransact...
29341 - [SC - Insight] Unsafe Downcast vulnerability this can lead to ...
29347 - [SC - Insight] Chainlinks latestRoundData might return stale o...
29348 - [SC - Insight] Token price returned by PriceConsumer may be in...
29384 - [SC - Insight] Malicious project can remove the ImmunefiGuard ...
29445 - [SC - Insight] latestRoundData Call May Result Stale
29483 - [SC - Insight] RewardTimelock::canExecuteTransaction() - Reward transaction allowed to execute before the cooldown period has strictly passed.
29484 - [SC - Insight] Potential Loss of Precision in Conversion from ...
29513 - [SC - Insight] Critical reentrancy vulnerability in executeRew...
29604 - [SC - Insight] VaultDelegate::sendReward() - Token fees not subtracted from vault balance before rewards are sent, triggering DoS of reward distribution functionality.
29744 - [SC - Insight] Projects can pay rewards at up to below market...
29760 - [SC - Insight] Enforcing Multiple Rewards During Arbitration Bug Allows Malicious Whitehats to Grief Vaults Causing Large Unnecessary Gas Fees, Revert Payment to Benevolent Whitehats, and Leave Vault in Arbitration

Reports by Type

Smart Contract