Search results

Tricky Navy Bird - Complete Market DoS via Division by Zero in utilizationRate() Function When Reserves Exceed or Equal Available Cash #698

Status: Open.

#1478 In sherlock-audit/2025-07-malda-judging;

· Sahil2389 opened on Aug 28, 2025

Plain Indigo Chameleon - Bridges don't support all of the listed assets

Sponsor ConfirmedThe sponsor acknowledged this issue is validThe sponsor acknowledged this issue is valid

Will FixThe sponsor confirmed this issue will be fixedThe sponsor confirmed this issue will be fixed

Status: Open.

#1477 In sherlock-audit/2025-07-malda-judging;

· sherlock-admin3 opened on Aug 14, 2025

Jumpy Pistachio Butterfly - User can get a large over-withdrawal or get blocked due to decimals mismatch on cross-chain accounting

Status: Open.

#1476 In sherlock-audit/2025-07-malda-judging;

· sherlock-admin2 opened on Aug 14, 2025

Suave Cider Liger - Attacker Can Bypass Outflow Limits and Drain Funds From the Protocol

Status: Open.

#1475 In sherlock-audit/2025-07-malda-judging;

· sherlock-admin4 opened on Aug 14, 2025

Genuine Rosewood Frog - accrue interest is not called for different tokens before doing calculations in _getHypotheticalAccountLiquidity

Status: Open.

#1474 In sherlock-audit/2025-07-malda-judging;

· sherlock-admin3 opened on Aug 14, 2025

Brave Scarlet Flamingo - Array Length Validation Causes Service Denial

Status: Open.

#1473 In sherlock-audit/2025-07-malda-judging;

· sherlock-admin2 opened on Aug 14, 2025

Decent Grape Shell - Liquidators can seize the mTokens from a borrower even though the borrower hasnt entered the mToken market.

Status: Open.

#1472 In sherlock-audit/2025-07-malda-judging;

· sherlock-admin4 opened on Aug 14, 2025

Micro Neon Beaver - Blacklisted Users Can Receive mTokens Through Mint-on-Behalf

Status: Open.

#1471 In sherlock-audit/2025-07-malda-judging;

· sherlock-admin3 opened on Aug 14, 2025

Beautiful Fossilized Griffin - Oracle validation bypass enables price manipulation & DoS

Status: Open.

#1470 In sherlock-audit/2025-07-malda-judging;

· sherlock-admin2 opened on Aug 14, 2025

Mammoth Blonde Sealion - inflated price in MixedPriceOracleV4::getUnderlyingPrice if the underlying decimals is not 18

Status: Open.

#1469 In sherlock-audit/2025-07-malda-judging;

· sherlock-admin4 opened on Aug 14, 2025

Jumpy Pistachio Butterfly - Wrong units in outflow USD limiter withdraw path can cause bypass of outflow cap

Status: Open.

#1468 In sherlock-audit/2025-07-malda-judging;

· sherlock-admin3 opened on Aug 14, 2025

Micro Neon Beaver - Migrator Fails to Migrate Borrow-Only Positions Not Used as Collateral

Status: Open.

#1467 In sherlock-audit/2025-07-malda-judging;

· sherlock-admin2 opened on Aug 14, 2025