Skip to content

Issues: sherlock-audit/2025-03-pinlink-rwa-tokenized-depin-marketplace-judging

Beta
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

206 Open 24 Closed
206 Open 24 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Rich Chili Grasshopper - Expired Listings Permanently Lock Withdrawals
#210 opened Mar 14, 2025 by sherlock-admin3
Fun Grey Okapi - STALENESS_THRESHOLD of 7 days is too long due to market volatility
#208 opened Mar 14, 2025 by sherlock-admin3
Lone Azure Narwhal - Attacker can front-run oracle update to arbitrage prices
#207 opened Mar 14, 2025 by sherlock-admin2
Beautiful Gingham Cheetah - Incorrect usage of Ownable inheritance and constructor
#206 opened Mar 14, 2025 by sherlock-admin4
Little Merlot Viper - The rewards system will inflate due to improper handling of subsequent deposits.
#205 opened Mar 14, 2025 by sherlock-admin3
Big Ocean Leopard - In case of 80%+ price drops of PIN compared to USDC, prices cant be updated causing arbritration oppurtunities
#204 opened Mar 14, 2025 by sherlock-admin2
Eager Hemp Wasp - Front-running CentralizedOracle::updateTokenPrice leads to an adversary purchasing fractional assets at lower price.
#203 opened Mar 14, 2025 by sherlock-admin4
Exotic Ebony Worm - streams::Arithmetic Precision Errors
#202 opened Mar 14, 2025 by sherlock-admin3
Tall Opaque Anteater - Lack of Reentrancy Protection in PinlinkShop.sol
#201 opened Mar 14, 2025 by sherlock-admin2
Alert Bronze Donkey - User can set extremely short deadlines leading to failed transactions
#200 opened Mar 14, 2025 by sherlock-admin4
Able Cinnamon Kestrel - updateTokenPrice() function in CentralizedOracle contract is vulnerable to front-running and back-running attack
#199 opened Mar 14, 2025 by sherlock-admin3
Gorgeous Caramel Bird - **A User** may lose their entitled _rewards_ that were accumulated up until when His **staked token ** was purchased/sold in the marketplace
#198 opened Mar 14, 2025 by sherlock-admin2
Melodic Azure Goat - okhayeeli - Multiple Identical Listings Allowed Due to block.number in Hash (Marketplace Redundancy and Potential Abuse) in PinlinkShop::_list
#197 opened Mar 14, 2025 by sherlock-admin4
Lone Azure Narwhal - The FractionalAssets::uri() function does not conform to EIP 1155 standard
#196 opened Mar 14, 2025 by sherlock-admin3
Tall Opaque Anteater - Stale Price Risk in CentralizedOracle.sol does not revert
#195 opened Mar 14, 2025 by sherlock-admin2
Sharp Shadow Blackbird - Price Staleness & Expired Data Risk (Even with Trusted Owner)
#194 opened Mar 14, 2025 by sherlock-admin4
Rich Chili Grasshopper - Seller can Front-Run or set high value to Brick Purchases via Overflow
#193 opened Mar 14, 2025 by sherlock-admin3
Mysterious Pistachio Platypus - The reward distribution can be DOS'ed by updating the reward of the REWARD_PROXY_ACCOUNT frequently.
#192 opened Mar 14, 2025 by sherlock-admin2
Powerful Arctic Giraffe - ## [M-1] Attacker can Farm rewards by entering the system strategically
#191 opened Mar 14, 2025 by sherlock-admin4
Brave Green Iguana - Listing ID Collision in PinlinkShop
#190 opened Mar 14, 2025 by sherlock-admin3
Sharp Shadow Blackbird - Sanity Check Logic Can Still Be Abused
#189 opened Mar 14, 2025 by sherlock-admin2
Little Merlot Viper - The oracle will cause buyers to overpay or be denied service due to outdated prices.
#188 opened Mar 14, 2025 by sherlock-admin4
Skinny Snowy Panther - Reward Manipulation Through Zero-Amount Deposits
#187 opened Mar 14, 2025 by sherlock-admin3
Winning Tweed Caribou - Fraction Sellers and Protocol Will Receive Reduced Payments from Buyers in PinLink Marketplace
#186 opened Mar 14, 2025 by sherlock-admin2
Odd Brown Jaguar - Incorrect msg.sender Handling in enableAsset Leads to Transfer Failure
#185 opened Mar 14, 2025 by sherlock-admin4
ProTip! Follow long discussions with comments:>50.