Competitive Audits
First Flights
Judging
Leaderboard
Docs
Toggle theme
Sign up
Log in
All Contests
QuantAMM
Submissions
QuantAMM
QuantAMM
QuantAMM
QuantAMM
49,600
OP
Public
49,600
OP
Dec 20th, 2024 → Jan 15th, 2025
View repo
1027 / 1027
Submissions
Severity
Tags
#1
Importing same file multiple times in the code
Low
#2
No validation For Oracle Configuration
Medium
#3
Potential Duplicate Oracles
Medium
#4
computeBalance function, QuantAMMWeightedPool.sol
Low
#5
Lack of input validation for array length, MultiHopOracle.sol
Low
#6
Precision Loss in fee calculation of function `onAfterSwap` causes overcharging of QuantAMM admin fees
High
#7
`blockTimestampDeposit` variable assigned incorrectly
Low
#8
_sourceArray.length will always < 8 when targetArrayLength ==0
Low
#9
Missing or Improper Fee Application in Swap Logic
High
#10
Precision loss in `_getData` function of `MultiHopOracle` Contract
Low
#11
Low Findings on QuantAMM
Low
#12
Missing Update for lastUpdateIntervalTime Leads to Stale Weight Calculations
High
#13
Chainlink returned data is not checked for being stale
Medium
#14
No check if Arbitrum/Optimism L2 sequencer is down in Chainlink feeds `ChainlinkOracle.sol`
Medium
#15
repeated new array in function QuantAMMStorage.sol#_quantAMMUnpack128Matrix()
Low
#16
The price acquisition of the _getData() function lacks validation of the returned data
Medium
#17
The `computeBalance` function may revert because the `setWeights` function doesn't check the boundary of the normalized weight
Medium
#18
Insufficient initialization check in `_setInitialWeights` function leading to re-initialization
Medium
#19
localData.lpTokenDepositValueChange logic can cause an underflow in uplift fee calculation
High
#20
Setting updateWeightRunner to address(0) Disables Critical Functionality
High
#21
Admin Can Reset updateWeightRunner to the Same Address, Leading to Inefficient Gas Usage and Misleading Event Logs
Low
#22
Precision loss in `locals.newWeights` calculation
Low
#23
Missing initialize Function in UpliftOnlyExample Hook/Router
Medium
#24
Lack of Withdrawal Mechanism for Swap Fees in UpliftOnlyExample Contract
Medium
#25
Incorrect Storage and Assignment of Block Timestamp in UpliftOnlyExample::afterUpdate
Low
#26
Hardcoded pool version string breaks factory's version control system
Medium
#27
Array packing underflow in QuantAMM pool initialization
Low
#28
poolsFeeData[pool][_to]'s length is not checked when afterUpdate()
Medium
#29
Missing removeLiquidityRecovery Function in UpliftOnlyExample Hook/Router
Medium
#30
Missing Pool Factory Validation in onRegister Function of UpliftOnlyExample Hook
Low
Previous
1
2
3
...
More pages
35
Next
Support
FAQs
Can’t find an answer? Join our Discord or follow us on Twitter.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
What is community judging?
How do I get rewarded?
What is a First Flight?
Give us feedback!
