Immunefi Audit CompetitionsThunderNFT | IOP
Reports by Severity
Critical
- 34534 - [SC - Critical] Maker will always only get token even if specif
- 34560 - [SC - Critical] Updating sell-maker-orders does not provide ref
- 34605 - [SC - Critical] ERC tokens can be stolen because the amount is
- 34629 - [SC - Critical] Theft of Deposited Funds
- 34630 - [SC - Critical] Incorrect Token Sale Amount
- 34636 - [SC - Critical] The amount is set to when creating the Executio
- 34736 - [SC - Critical] ERC tokens are stuck on the contract if more th
- 34800 - [SC - Critical] Improper input validation in order update funct
- 34930 - [SC - Critical] User can only trade token when ERC is used
- 34934 - [SC - Critical] thunder_exchangeupdate_order can be abused to s
- 34949 - [SC - Critical] Missing proper validation when updating order
- 34955 - [SC - Critical] Nfts of type may be stolen by updating an order
- 34957 - [SC - Critical] executionResults always returns an amount of le
- 34958 - [SC - Critical] Incorrect Setting of Amount in ExecutionResult
- 34980 - [SC - Critical] Order side manipulation can lead to theft of NF
High
- 34496 - [SC - High] Users cant withdraw their funds for removed assets
- 34519 - [SC - High] users cant withdraw their tokens when specific asse
- 34565 - [SC - High] Selling maker cant cancel to retrieve his funds whe
- 34585 - [SC - High] Permanent freezing of NFTS that seller deposit into
- 34587 - [SC - High] Users might temporarily get their funds locked in P
- 34642 - [SC - High] strategy de-listing causes sellers NFTs locked on T
- 34816 - [SC - High] users cant call update_order to update the strategy
- 34943 - [SC - High] User cant withdraw asset from pool after asset_mana
- 34966 - [SC - High] Royalty or protocol fee of will DoS executing order
Medium
Low
- 34455 - [SC - Low] Double Token Vulnerability leads to drain funds
- 34522 - [SC - Low] Self-transfer would inflate the balance
- 34545 - [SC - Low] Smart contract can be taken over by malicious user b
- 34659 - [SC - Low] Pool Balance Inflation
- 34702 - [SC - Low] the function register_royalty_info does not allow to
- 34760 - [SC - Low] Off-by-one error in get_supported_asset
- 34761 - [SC - Low] Off-by-one error in get_whitelisted_strategy
- 34791 - [SC - Low] Incompatibility with SRC might lead to inability of
- 34839 - [SC - Low] Royalty Fee limit is not enforced for registered col
- 34848 - [SC - Low] Incorrect verification of deposit asset leads to cre
- 34906 - [SC - Low] Existing Sell order can be executed despite payment
- 34962 - [SC - Low] tranfer_from function have critical issue which lead
- 34964 - [SC - Low] Faulty Index out of Bounds
- 34973 - [SC - Low] royalty_managerregister_royalty_info might not work
- 34975 - [SC - Low] Read out of index
Insight
- 34542 - [SC - Insight] Not Handling Balance Entries Properly in the Wit
- 34578 - [SC - Insight] unds Not Locked During Order Placement
- 34677 - [SC - Insight] NFTs can not be canceled since the cancel_order
- 34963 - [SC - Insight] Invalid orders persist in storage maps with no i
- 34967 - [SC - Insight] Insights Report
Reports by Type
Smart Contract
- 34455 - [SC - Low] Double Token Vulnerability leads to drain funds
- 34496 - [SC - High] Users cant withdraw their funds for removed assets
- 34519 - [SC - High] users cant withdraw their tokens when specific asse
- 34522 - [SC - Low] Self-transfer would inflate the balance
- 34534 - [SC - Critical] Maker will always only get token even if specif
- 34542 - [SC - Insight] Not Handling Balance Entries Properly in the Wit
- 34545 - [SC - Low] Smart contract can be taken over by malicious user b
- 34560 - [SC - Critical] Updating sell-maker-orders does not provide ref
- 34565 - [SC - High] Selling maker cant cancel to retrieve his funds whe
- 34567 - [SC - Medium] users with current bid order can not update their
- 34578 - [SC - Insight] unds Not Locked During Order Placement
- 34585 - [SC - High] Permanent freezing of NFTS that seller deposit into
- 34587 - [SC - High] Users might temporarily get their funds locked in P
- 34605 - [SC - Critical] ERC tokens can be stolen because the amount is
- 34629 - [SC - Critical] Theft of Deposited Funds
- 34630 - [SC - Critical] Incorrect Token Sale Amount
- 34636 - [SC - Critical] The amount is set to when creating the Executio
- 34642 - [SC - High] strategy de-listing causes sellers NFTs locked on T
- 34659 - [SC - Low] Pool Balance Inflation
- 34677 - [SC - Insight] NFTs can not be canceled since the cancel_order
- 34702 - [SC - Low] the function register_royalty_info does not allow to
- 34714 - [SC - Medium] owner of NFT who have sell orderlisting NFT can n
- 34736 - [SC - Critical] ERC tokens are stuck on the contract if more th
- 34760 - [SC - Low] Off-by-one error in get_supported_asset
- 34761 - [SC - Low] Off-by-one error in get_whitelisted_strategy
- 34791 - [SC - Low] Incompatibility with SRC might lead to inability of
- 34800 - [SC - Critical] Improper input validation in order update funct
- 34816 - [SC - High] users cant call update_order to update the strategy
- 34839 - [SC - Low] Royalty Fee limit is not enforced for registered col
- 34848 - [SC - Low] Incorrect verification of deposit asset leads to cre
- 34906 - [SC - Low] Existing Sell order can be executed despite payment
- 34930 - [SC - Critical] User can only trade token when ERC is used
- 34934 - [SC - Critical] thunder_exchangeupdate_order can be abused to s
- 34943 - [SC - High] User cant withdraw asset from pool after asset_mana
- 34949 - [SC - Critical] Missing proper validation when updating order
- 34955 - [SC - Critical] Nfts of type may be stolen by updating an order
- 34957 - [SC - Critical] executionResults always returns an amount of le
- 34958 - [SC - Critical] Incorrect Setting of Amount in ExecutionResult
- 34962 - [SC - Low] tranfer_from function have critical issue which lead
- 34963 - [SC - Insight] Invalid orders persist in storage maps with no i
- 34964 - [SC - Low] Faulty Index out of Bounds
- 34966 - [SC - High] Royalty or protocol fee of will DoS executing order
- 34967 - [SC - Insight] Insights Report
- 34973 - [SC - Low] royalty_managerregister_royalty_info might not work
- 34975 - [SC - Low] Read out of index
- 34980 - [SC - Critical] Order side manipulation can lead to theft of NF