Skip to content

Actions: code-423n4/2024-10-coded-estate-findings

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
332 workflow runs
332 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

Tenant can bypass the cancellation penalty or get free rent (short-term) Repo Moderator #107: Issue #39 labeled by blockchainstar12
October 14, 2024 02:28 19s
October 14, 2024 02:28 19s
finalizelongtermrental() refunds money to the token owner/ property manager instead of the tenant Repo Moderator #106: Issue #44 labeled by blockchainstar12
October 14, 2024 01:30 14s
October 14, 2024 01:30 14s
finalizelongtermrental() refunds money to the token owner/ property manager instead of the tenant Repo Moderator #105: Issue #44 labeled by c4-judge
October 12, 2024 14:26 2s
October 12, 2024 14:26 2s
Attakers can steal the funds from long-term reservation Repo Moderator #104: Issue #41 labeled by c4-judge
October 12, 2024 14:25 2s
October 12, 2024 14:25 2s
Attakers can steal the funds from long-term reservation Repo Moderator #103: Issue #41 closed by c4-judge
October 12, 2024 14:25 2s
October 12, 2024 14:25 2s
Malicious NFT owners can rug the reservation of the long-term Repo Moderator #102: Issue #37 labeled by c4-judge
October 12, 2024 14:18 2s
October 12, 2024 14:18 2s
Users will wait untille the last day to cancel reservation to avoid cancellation penalty Repo Moderator #101: Issue #36 labeled by c4-judge
October 12, 2024 14:18 2s
October 12, 2024 14:18 2s
users can't cancel reservation due to out-of-gas Repo Moderator #100: Issue #35 labeled by c4-judge
October 12, 2024 14:18 2s
October 12, 2024 14:18 2s
Use of u64 for price_per_day and price_per_month limits handling tokens with 18 decimals Repo Moderator #99: Issue #29 labeled by c4-judge
October 12, 2024 14:17 2s
October 12, 2024 14:17 2s
withdrawToLandlord() cant send all rent earned overtime to landlord Repo Moderator #98: Issue #28 labeled by c4-judge
October 12, 2024 14:17 2s
October 12, 2024 14:17 2s
Incorrect use of u64 for arg amount in withdrawtolandlord can cause withdrawal failure Repo Moderator #97: Issue #27 labeled by c4-judge
October 12, 2024 14:16 2s
October 12, 2024 14:16 2s
incorrect refund amount is sent to the tenant if long term reservation is cancelled after approval Repo Moderator #96: Issue #26 labeled by c4-judge
October 12, 2024 14:16 2s
October 12, 2024 14:16 2s
depositforlongtermrental() does not validate the sent_amount Repo Moderator #95: Issue #25 labeled by c4-judge
October 12, 2024 14:15 2s
October 12, 2024 14:15 2s
calculation in cancelreservationafterapprovalforshortterm() doesnt follow the BPS style seen across the contract in other functions. Repo Moderator #94: Issue #24 labeled by c4-judge
October 12, 2024 14:15 2s
October 12, 2024 14:15 2s
Lack of upfront cost for long-term reservations allows fake reservations, blocking real users Repo Moderator #93: Issue #22 labeled by c4-judge
October 12, 2024 14:15 2s
October 12, 2024 14:15 2s
unbounded token.rentals array will always grow and may cause DOS issues for other functions that iterate it. Repo Moderator #92: Issue #21 labeled by c4-judge
October 12, 2024 14:15 2s
October 12, 2024 14:15 2s
reservations can be made outside of rental property's available_period Repo Moderator #91: Issue #20 labeled by c4-judge
October 12, 2024 14:14 1s
October 12, 2024 14:14 1s
Self-approval for all tokens allowed Repo Moderator #90: Issue #18 labeled by c4-judge
October 12, 2024 14:13 2s
October 12, 2024 14:13 2s
Balance underflows are not properly handled Repo Moderator #89: Issue #17 labeled by c4-judge
October 12, 2024 14:13 1s
October 12, 2024 14:13 1s
Integer overflow in price calcs Repo Moderator #88: Issue #16 labeled by c4-judge
October 12, 2024 14:13 2s
October 12, 2024 14:13 2s
Flawed validation in short-term rental reservations allows overpayment Repo Moderator #87: Issue #14 labeled by c4-judge
October 12, 2024 14:13 2s
October 12, 2024 14:13 2s
can impersonate another high value rental because token_uri is arbitrary and supplied by user. Repo Moderator #86: Issue #10 labeled by c4-judge
October 12, 2024 14:10 2s
October 12, 2024 14:10 2s
user supplied owner address which is meant to be token owner is never the token owner. Repo Moderator #85: Issue #9 labeled by c4-judge
October 12, 2024 14:10 2s
October 12, 2024 14:10 2s
lack of access restriction for important functions that change storage variables. Repo Moderator #84: Issue #8 labeled by c4-judge
October 12, 2024 14:09 2s
October 12, 2024 14:09 2s
malicious rental owner can rob bidders of the currency amounts sent in via older bids. Repo Moderator #83: Issue #45 labeled by c4-judge
October 12, 2024 14:07 2s
October 12, 2024 14:07 2s
ProTip! You can narrow down the results and go further in time using created:<2024-10-12 or the other filters available.