Skip to content

Issues: sherlock-audit/2024-10-ethos-network-judging

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

319 Open 18 Closed
319 Open 18 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

ParthMandale - pausableUpgradable from oppenzeppline must be used. Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#320 opened Nov 4, 2024 by sherlock-admin4
1
sakibcy - Anybody can register their address with a particular profileId Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#319 opened Nov 4, 2024 by sherlock-admin3
1
durov - Review authors should be able to archive and restore reviews from any address that belongs to the profile Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#318 opened Nov 4, 2024 by sherlock-admin2
1
John_Femi - Some Users may get less invites than other after setDefaultNumberOfInvites is called Won't Fix The sponsor confirmed this issue will not be fixed
#317 opened Nov 4, 2024 by sherlock-admin4
ParthMandale - The incorrect address is removed in _deleteAddressAtIndexFromArray() Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#316 opened Nov 4, 2024 by sherlock-admin3
1
bareli - use safetransfer instead of transfer Won't Fix The sponsor confirmed this issue will not be fixed
#315 opened Nov 4, 2024 by sherlock-admin2
smbv-1923 - EthosProfile which contains multiple address cannot work with archiveReview() and restoreReview()`
#314 opened Nov 4, 2024 by sherlock-admin4
ajayss - User may have his transfer failed when paying price for review Won't Fix The sponsor confirmed this issue will not be fixed
#313 opened Nov 4, 2024 by sherlock-admin3
ajayss - User will get same hash when attestation details are modified slightly
#312 opened Nov 4, 2024 by sherlock-admin2
John_Femi - Potential Hash Collision will cause overwrite of attestation
#311 opened Nov 4, 2024 by sherlock-admin4
PNS - The incorrect counting of profile addresses wrongly limits their total number Sponsor Disputed The sponsor disputed this issue's validity Will Fix The sponsor confirmed this issue will be fixed
#310 opened Nov 4, 2024 by sherlock-admin3
1
noromeb - a re-registred address will count double in the sum of checkMaxAddresses
#308 opened Nov 4, 2024 by sherlock-admin3
PNS - Re-registering an address does not remove it from the compromised list
#307 opened Nov 4, 2024 by sherlock-admin2
Albort - There’s an error in the _deleteAddressAtIndexFromArray function Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#306 opened Nov 4, 2024 by sherlock-admin4
1
0xBhumii - Unauthorized Attestations Allowed for Archived Profiles in EthosAttestation Contract Sponsor Confirmed The sponsor acknowledged this issue is valid Won't Fix The sponsor confirmed this issue will not be fixed
#305 opened Nov 4, 2024 by sherlock-admin3
LeFy - Attestation Reviews does not properly handle the case when attestation ownership has changed Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#304 opened Nov 4, 2024 by sherlock-admin2
1
056Security - attestationById does not get updated when attestations are claimed in EthosAttestation Won't Fix The sponsor confirmed this issue will not be fixed
#303 opened Nov 4, 2024 by sherlock-admin4
Darinrikusham - There is no restriction on the number of invitees in the param in bulkInviteAddresses function in EthosProfile contract which could lead to out of bound gas issue. Won't Fix The sponsor confirmed this issue will not be fixed
#302 opened Nov 4, 2024 by sherlock-admin3
PNS - A compromised address does not lose any ability to perform actions on behalf of the profile
#301 opened Nov 4, 2024 by sherlock-admin2
Bozho - When a mock address is registered to another user, it loses its reviews, votes, and comments
#300 opened Nov 4, 2024 by sherlock-admin4
smbv-1923 - Wrong address gets deleted in _deleteAddressAtIndexFromArray()
#299 opened Nov 4, 2024 by sherlock-admin3
Darinrikusham - Signature entered in createAttestation function in EthosAttestation contract could lead to anyone using signature for malicious purpose for other profileId Sponsor Confirmed The sponsor acknowledged this issue is valid Won't Fix The sponsor confirmed this issue will not be fixed
#298 opened Nov 4, 2024 by sherlock-admin2
LeFy - Lack of proper validations in EthosDiscussion.sol lets a compromised address to add malicious replys on user's behalf
#297 opened Nov 4, 2024 by sherlock-admin4
dobrevaleri - Upgrades might cause storage collision
#296 opened Nov 4, 2024 by sherlock-admin3
PNS - An incorrectly identified author will not be able to archive or restore reviews Sponsor Confirmed The sponsor acknowledged this issue is valid Will Fix The sponsor confirmed this issue will be fixed
#295 opened Nov 4, 2024 by sherlock-admin2
1
ProTip! Mix and match filters to narrow down what you’re looking for.