File size: 5,169 Bytes
8fccda7
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
[
  {
    "vulnerability": "Non-compliance with EIP4626 standard - previewDeposit",
    "terms": [
      "previewdeposit non-compliance",
      "eip4626 previewdeposit issue",
      "previewdeposit violation",
      "previewdeposit standard break",
      "previewdeposit limitation include",
      "eip-4626 previewdeposit violation",
      "previewdeposit spec deviation",
      "previewdeposit max limitation error",
      "4626 compliance failure (previewdeposit)",
      "eip4626",
      "previewdeposit",
      "compliance",
      "standard violation",
      "maxdeposit",
      "limitation"
    ]
  },
  {
    "vulnerability": "Additive burn (rounding vulnerability)",
    "terms": [
      "additive burn",
      "rounding burn",
      "burn rounding",
      "withdraw rounding zero burn",
      "atoken burn rounding",
      "rounding burn attack",
      "additive burn rounding",
      "withdraw rounding to zero",
      "atoken conversion rounding",
      "burn rounding vulnerability",
      "rounding",
      "burn",
      "atoken",
      "withdraw",
      "precision loss",
      "conversion rate",
      "zero burn"
    ]
  },
  {
    "vulnerability": "Additive mint (Stable debt token)",
    "terms": [
      "additive mint",
      "stable debt rounding",
      "mint rounding vulnerability",
      "debt token rounding",
      "deposit rounding mint",
      "rounding mint attack",
      "additive mint rounding",
      "stable debt token rounding",
      "deposit rounding mint",
      "debt token inflation",
      "rounding",
      "mint",
      "stable debt",
      "deposit",
      "precision loss",
      "debt token",
      "inflation"
    ]
  },
  {
    "vulnerability": "Non-compliance with EIP4626 standard - previewMint",
    "terms": [
      "previewmint non-compliance",
      "eip4626 previewmint issue",
      "previewmint violation",
      "previewmint standard break",
      "eip-4626 previewmint violation",
      "previewmint spec deviation",
      "previewmint max limitation error",
      "4626 compliance failure (previewmint)",
      "eip4626",
      "previewmint",
      "compliance",
      "standard violation",
      "maxmint",
      "limitation"
    ]
  },
  {
    "vulnerability": "Non-compliance with EIP4626 standard - previewWithdraw",
    "terms": [
      "previewwithdraw non-compliance",
      "eip4626 previewwithdraw issue",
      "previewwithdraw violation",
      "previewwithdraw standard break",
      "eip-4626 previewwithdraw violation",
      "previewwithdraw spec deviation",
      "previewwithdraw max limitation error",
      "4626 compliance failure (previewwithdraw)",
      "eip4626",
      "previewwithdraw",
      "compliance",
      "standard violation",
      "maxwithdraw",
      "limitation"
    ]
  },
  {
    "vulnerability": "Non-compliance with EIP4626 standard - previewRedeem",
    "terms": [
      "previewredeem non-compliance",
      "eip4626 previewredeem issue",
      "previewredeem violation",
      "previewredeem standard break",
      "eip-4626 previewredeem violation",
      "previewredeem spec deviation",
      "previewredeem max limitation error",
      "4626 compliance failure (previewredeem)",
      "eip4626",
      "previewredeem",
      "compliance",
      "standard violation",
      "maxredeem",
      "limitation"
    ]
  },
  {
    "vulnerability": "Non-compliance with EIP4626 standard - non-reverting functions",
    "terms": [
      "non-reverting functions revert",
      "eip4626 revert issue",
      "totalassets revert",
      "max functions revert",
      "arithmetic revert vulnerability",
      "eip-4626 reverting view functions",
      "totalassets revert",
      "max functions revert",
      "arithmetic revert in 4626",
      "view function revert violation",
      "eip4626",
      "revert",
      "totalassets",
      "maxdeposit",
      "maxmint",
      "maxwithdraw",
      "maxredeem",
      "arithmetic underflow",
      "overflow"
    ]
  },
  {
    "vulnerability": "Discount Factor Issue (Unfair finalization within a batch)",
    "terms": [
      "discount factor unfair",
      "batch finalization unfair",
      "fifo violation",
      "discount factor flaw",
      "unfair batch finalization",
      "fifo fairness violation",
      "batch finalization unfairness",
      "discount factor miscalculation",
      "queue finalization manipulation",
      "unfair slashing distribution",
      "discount factor",
      "finalization",
      "batch",
      "fifo",
      "fairness",
      "queue",
      "slashing",
      "share rate"
    ]
  },
  {
    "vulnerability": "Potential for incorrect ETH transfer due to price calculation",
    "terms": [
      "incorrect eth transfer",
      "price calculation error",
      "claim eth wrong",
      "discounted batch error",
      "eth transfer miscalculation",
      "claim amount miscalculation",
      "eth transfer error",
      "price calculation flaw",
      "discounted batch eth error",
      "incorrect eth withdrawal",
      "eth transfer",
      "claim",
      "price calculation",
      "discounted batch",
      "finalization",
      "incorrect amount",
      "fund loss"
    ]
  }
]