Immunefi Audit CompetitionsVeChain Hayabusa Upgrade | Attackathon
Reports by Severity
Medium
Insight
- 57468 - [BC - Insight] there is an issue about zero vtho generation during hayabusa transition period
- 57412 - [SC - Insight] gas optimization insight improve gas cost efficiency by the use of custom errors in staker sol contract
- 57179 - [BC - Insight] during the call to native totalsupply there s missing gas charges
- 57021 - [BC - Insight] lack of panic recovery in housekeeping goroutine creates potential for denial of service
- 56946 - [BC - Insight] the code comparing two big in pointers for equality not their numeric values
- 56761 - [BC - Insight] the check for integer overflow in the function staker go checkstake is incorrect
- 56657 - [BC - Insight] inactive validator scheduling bypass in vechain thor pos consensus mechanism
- 56629 - [BC - Insight] there is an issue in mapping gas undercharge and is enables 30 extra node work per unit gas
- 56626 - [BC - Insight] trivial renewallist bloat attack exploits unmetered database writes to increase block processing time risking bft disruption
- 56513 - [BC - Insight] during the call to native issuance there s a missing gas charge before call to calculaterewards
- 56454 - [BC - Insight] gas undercharging threatens hayabusa network upgrade
- 56403 - [BC - Insight] there is a problem in the dpos threshold switch undercounts votes at hayabusa activation
- 56367 - [SC - Insight] staker gas optimization public to external visibility
- 56362 - [BC - Insight] during addvalidation if pos not active authority native env state get should consume double the gas
- 56345 - [BC - Insight] there is an issue related to strict threshold breaks exact 2 3 and is causing finality freeze
- 56256 - [BC - Insight] redundant sload for global endorsement parameter
- 56187 - [BC - Insight] brittle hardcoded gas metering model
- 56045 - [BC - Insight] block packing starvation via oversized priority transactions
- 55926 - [BC - Insight] totalsupply overstates circulating vtho
- 55925 - [BC - Insight] underpriced supply queries enable cheap cpu dos
- 55806 - [BC - Insight] critical missing input validation in governance parameter allows malicious underflow leading to permanent freeze of all dpos rewards
- 55711 - [SC - Insight] redundant gas charge in native addvalidation function leads to unnecessary gas costs
- 55524 - [BC - Insight] null body transaction submission crashes rpc handler
Reports by Type
Blockchain/DLT
- 57468 - [BC - Insight] there is an issue about zero vtho generation during hayabusa transition period
- 57179 - [BC - Insight] during the call to native totalsupply there s missing gas charges
- 57136 - [BC - Low] txpool priority cache lets base fee swings reduce proposers tips
- 57055 - [BC - Medium] dos via p2p during block header validation using bad proof
- 57021 - [BC - Insight] lack of panic recovery in housekeeping goroutine creates potential for denial of service
- 56946 - [BC - Insight] the code comparing two big in pointers for equality not their numeric values
- 56761 - [BC - Insight] the check for integer overflow in the function staker go checkstake is incorrect
- 56657 - [BC - Insight] inactive validator scheduling bypass in vechain thor pos consensus mechanism
- 56629 - [BC - Insight] there is an issue in mapping gas undercharge and is enables 30 extra node work per unit gas
- 56626 - [BC - Insight] trivial renewallist bloat attack exploits unmetered database writes to increase block processing time risking bft disruption
- 56611 - [BC - Medium] remote p2p crash during sync thor default configuration
- 56513 - [BC - Insight] during the call to native issuance there s a missing gas charge before call to calculaterewards
- 56454 - [BC - Insight] gas undercharging threatens hayabusa network upgrade
- 56403 - [BC - Insight] there is a problem in the dpos threshold switch undercounts votes at hayabusa activation
- 56362 - [BC - Insight] during addvalidation if pos not active authority native env state get should consume double the gas
- 56345 - [BC - Insight] there is an issue related to strict threshold breaks exact 2 3 and is causing finality freeze
- 56256 - [BC - Insight] redundant sload for global endorsement parameter
- 56187 - [BC - Insight] brittle hardcoded gas metering model
- 56045 - [BC - Insight] block packing starvation via oversized priority transactions
- 55926 - [BC - Insight] totalsupply overstates circulating vtho
- 55925 - [BC - Insight] underpriced supply queries enable cheap cpu dos
- 55806 - [BC - Insight] critical missing input validation in governance parameter allows malicious underflow leading to permanent freeze of all dpos rewards
- 55632 - [BC - Critical] delegation submitted in the same period before a validator exit will be permanently frozen
- 55524 - [BC - Insight] null body transaction submission crashes rpc handler
Smart Contract
- 57412 - [SC - Insight] gas optimization insight improve gas cost efficiency by the use of custom errors in staker sol contract
- 56367 - [SC - Insight] staker gas optimization public to external visibility
- 55957 - [SC - Medium] checkstake does not check for uint64 overflow
- 55711 - [SC - Insight] redundant gas charge in native addvalidation function leads to unnecessary gas costs