Immunefi Audit Competitions

Spectra Finance

Reports by Severity

Medium

44167 - [SC - Medium] Incorrect balance check in PT redemption commands
44064 - [SC - Medium] Dispatcher incorrect validation causes principal tokens to be stuck in inheriting contract allowing attacker to steal user funds

Low

43803 - [SC - Low] Boolean success returned from address.call{value: amount}() not checked
44091 - [SC - Low] Lack of ETH transfer check leads to stolen funds
43469 - [SC - Low] Return value of low level call not checked can cause silent Reverts
43659 - [SC - Low] Silent ETH transfer failure in Dispatcher.sol leads to permament freezing of funds
44161 - [SC - Low] Return value of low level call not ckecked in Dispatcher.sol contract
44101 - [SC - Low] _dispatch() incorrectly assumes revert bubbling when transferring native tokens.
43981 - [SC - Low] Silent ETH transfer failure in TRANSFER_NATIVE command can permanently lock user funds
43712 - [SC - Low] Silent ETH transfer failure in TRANSFER_NATIVE command leads to permament locking of user funds
44081 - [SC - Low] Users ETH could be stuck forever without a way to recover it
44158 - [SC - Low] Dispatcher does not check if native transfers are successful
43856 - [SC - Low] Dispatcher._dispatch() does not revert on failure of transfer of funds when called with the TRANSFER_NATIVE command
44035 - [SC - Low] Lack of validation in native transfer allows attacker to steal user funds
43987 - [SC - Low] Unchecked low-level ETH transfer in Dispatcher.sol may lead to undetected failures
43528 - [SC - Low] fund freeze scenario
43611 - [SC - Low] Unchecked ETH Transfer in TRANSFER_NATIVE Command Risks Silent Failures
43380 - [SC - Low] Missing Error Check in TRANSFER_NATIVE Command
43490 - [SC - Low] TRANSFER_NATIVE in Dispatcher can lead to loss of funds due to not checking user can receive ETH
43408 - [SC - Low] Not checking call success in TRANSFER_NATIVE
43912 - [SC - Low] Lack of ETH Success Transfer Checks in Dispatcher.sol
44170 - [SC - Low] Missing Check for Native ETH Transfer Success Allows Silent Failures and Potential Theft of Funds
44173 - [SC - Low] Unchecked Low-Level Call in TRANSFER_NATIVE in Dispatcher::_dispatch Can Lead to Locked Ether and Potential Theft
43274 - [SC - Low] TRANSFER_NATIVE Command in Dispatcher Does Not Check Return Value of Low-Level Call
44131 - [SC - Low] An attacker can steal frozen user ETH due to Dispatcher error
43729 - [SC - Low] Silent execution failure on Dispatcher::_dispatch due to unchecked return value on Dispatcher:TRANSFER_NATIVE operation
44175 - [SC - Low] Missing Success Check for payable(recipient).call

Insight

Reports by Type

Smart Contract