https://solodit.cyfrin.io/issues/attacker-can-dos-stakev2s-rewards-distribution-by-repeatedly-inflating-zappers-approval-for-whitelisted-kodiak-vault-tokens-immunefi-yeet-git https://solodit.cyfrin.io/issues/retroactive-reward-cap-manipulation-allows-theftloss-of-unclaimed-yield-immunefi-yeet-git https://solodit.cyfrin.io/issues/premature-transaction-acceptance-to-mempoolda-without-signature-validation-immunefi-movement-labs-git https://solodit.cyfrin.io/issues/rpc-server-takedown-immunefi-movement-labs-git https://solodit.cyfrin.io/issues/vested-tokens-are-counted-as-accumulated-revenue-immunefi-yeet-git https://solodit.cyfrin.io/issues/calculation-of-accumulateddeptrewardsyeet-is-incorrect-lead-to-user-lost-of-fund-immunefi-yeet-git https://solodit.cyfrin.io/issues/attacker-can-publish-a-blob-that-cannot-be-deserialized-and-shut-down-the-movement-chain-immunefi-movement-labs-git https://solodit.cyfrin.io/issues/stakev2-contract-insolvency-issue-immunefi-yeet-git https://solodit.cyfrin.io/issues/accumulateddeptrewardsyeet-accounts-for-tokens-under-unstaking-process-immunefi-yeet-git https://solodit.cyfrin.io/issues/contract-fails-to-deliver-promised-returns-due-to-changed-max_cap_per_wallet_per_epoch_factor-immunefi-yeet-git https://solodit.cyfrin.io/issues/permanent-freezing-of-yield-due-to-incorrect-reward-handling-in-stakev2-claim-functions-immunefi-yeet-git https://solodit.cyfrin.io/issues/harvest-timing-exploit-enables-theft-of-unclaimed-yield-immunefi-yeet-git https://solodit.cyfrin.io/issues/blocking-sleep-in-async-context-leads-to-thread-pool-exhaustion-and-dos-immunefi-movement-labs-git https://solodit.cyfrin.io/issues/stakev2-inconsistencies-in-totalsupply-computation-can-lead-to-protocol-insolvency-immunefi-yeet-git https://solodit.cyfrin.io/issues/a-malicious-signer-could-manipulate-withdrawal-decisions-preventing-accepted-and-rejected-withdrawals-from-getting-confirmed-on-stacks-chain-immunefi-stacks-ii-git https://solodit.cyfrin.io/issues/the-signer-can-submit-multi-tx-first-to-make-the-coordinators-submission-fail-immunefi-stacks-ii-git https://solodit.cyfrin.io/issues/unintended-chain-split-in-movement-full-node-immunefi-movement-labs-git https://solodit.cyfrin.io/issues/users-can-submit-deposits-containing-large-reclaim_scripts-to-dos-emily-and-signers-immunefi-stacks-ii-git https://solodit.cyfrin.io/issues/unvalidated-withdrawal-events-allow-data-manipulation-and-denial-of-service-in-emily-immunefi-stacks-ii-git https://solodit.cyfrin.io/issues/a-malicious-signer-can-force-a-panic-in-the-coordinator-by-sending-dkgfailurebadprivateshares-with-an-invalid-signer-id-immunefi-stacks-ii-git https://solodit.cyfrin.io/issues/calling-multiple-withdrawals-on-a-single-transaction-causes-signers-to-halt-and-the-network-to-stop-immunefi-stacks-ii-git https://solodit.cyfrin.io/issues/malicious-signers-can-give-different-votes-to-other-signers-to-prevent-sbtc-withdrawal-immunefi-stacks-ii-git https://solodit.cyfrin.io/issues/jwt-salt-expiration-isnt-entirely-correct-in-wallet_rpc_serverauth_http_request-immunefi-zano-git https://solodit.cyfrin.io/issues/drain-node-staking-account-due-to-improper-validation-of-setcerttime-internal-transaction-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/removal-of-node-out-of-network-via-remove-by-app-gossip-and-signature-duplications-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/multiple-vulnerabilities-in-signature-verification-during-receipt-processing-o-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/improper-input-validation-in-fixdeserializedwrappedevmaccount-leads-to-dos-and-total-network-shutdown-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/tricking-nodes-into-signing-nearly-arbitrary-data-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/node-fetch-without-response-limit-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/malicious-validator-can-inject-its-own-cycle-record-into-connected-archiver-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/total-network-shutdown-via-fixdeserializedwrappedevmaccount-call-through-binary_repair_oos_accounts-endpoint-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/standard-node-rewarding-flow-can-be-blocked-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/archiver-is-still-vulnerable-to-replay-attack-to-set-config-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/accountdeserializer-isnt-type-safe-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/no-rate-limiting-in-resource-intensive-endpoint-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/numerous-replay-attacks-with-arbitrary-data-to-protected-endpoints-are-possibl-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/malicious-validator-can-modify-txid-in-global-transactions-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/signature-forgery-on-behalf-of-network-nodes-using-binary_sign_app_data-endpoint-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/receiving-rewards-multiple-times-for-the-same-period-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/lack-of-validation-of-node-deactivation-time-in-claimrewards-allows-to-steal-rewards-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/lack-of-validation-of-node-activation-time-in-initrewardtimes-allows-to-steal-rewards-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/bypass-receipt-signing-validation-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/lack-of-consensus-voting-in-best-cycle-calculation-allows-a-malicious-validator-to-fake-cycle-data-and-crash-all-nodes-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/bypass-transferfromsecureaccount-transaction-validations-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/bypass-certificate-signing-validation-by-double-counting-signatures-due-to-signature-malleability-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/dos-archiver-via-data-subscription-channel-due-to-broken-safestringfy-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/blocking-all-users-from-interacting-with-particular-contractsprotocols-via-json-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/prevent-new-validators-from-joining-the-network-by-a-dos-of-the-archiver-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/bypass-setcerttime-transaction-signature-check-2-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/bypass-setcerttime-transaction-signature-check-1-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/inducing-large-memory-allocation-via-join-endpoint-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/filling-the-queue-with-setcerttime-stop-the-network-from-processing-new-transactions-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/bypass-certificate-signing-validation-by-double-counting-signatures-due-to-ignored-suffixes-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/bypass-certificate-signing-validation-by-double-counting-signatures-due-to-capitalization-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/reward-exploitation-via-unvalidated-node-status-in-initrewardtx-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/malicious-validator-can-overwrite-any-cycle-data-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/blocking-the-victims-account-address-from-sending-transactions-via-json-rpc-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/malicious-node-can-drain-balance-of-other-nodes-nominator-evm-address-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/insufficient-validation-on-claimreward-transaction-allows-attacker-to-claim-an-inflated-reward-or-prevent-all-nodes-from-being-rewarded-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/flatcfm-cannot-be-resolved-in-case-answer-of-questionid-are-in-greater-or-equal-to-2outcome_count-and-answer-2outcome_count-is-0-immunefi-butter-git https://solodit.cyfrin.io/issues/lack-of-authorization-on-initclaimreward-transaction-allows-attacker-to-prevent-all-nodes-from-being-rewarded-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/improper-serialization-can-create-an-out-of-memory-oom-issue-on-the-archive-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/gotget-without-response-limit-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/trusting-heavily-on-appdata-enables-infinite-shm-duplication-through-double-spend-exploit-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/tricking-legit-node-to-sign-their-own-apoptosis-request-payload-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/arbitrarily-set-any-archiver-config-and-remotely-turning-it-off-immunefi-shardeum-ancillaries-iii-git https://solodit.cyfrin.io/issues/joinroute-attacker-reachable-input-serialization-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/eip-2930-transactions-with-20k-address-overload-the-nodes-and-force-the-network-into-safety-mode-immunefi-shardeum-core-iii-git https://solodit.cyfrin.io/issues/eels-cant-handle-overflow-gas-calculation-in-modexp-precompile-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/lighthouse-remote-dos-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/teku-remote-dos-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/no-check-on-the-maximum-size-of-the-encoded-enr-on-enr_response-packet-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/missing-expiration-check-for-pong-and-neighbors-packets-and-not-refreshing-the-endpoint-proof-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/evaluation-order-is-not-respected-in-log-function-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/decode-rlp-of-legacy-transaction-allows-tailing-bytes-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/dos-any-reth-node-via-ban-logic-exploit-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/the-missing-check-in-depositsdepositscriptinputsparse-permits-losing-funds-by-immunefi-stacks-git https://solodit.cyfrin.io/issues/nibmus-eth2-remote-crash-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/nodes-with-trusted-peers-vulnerable-to-pending-peer-flooding-and-dos-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/augassign-evaluation-order-causing-oob-write-within-the-object-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/insufficient-validation-on-offchaintokendata-in-tokenpoolreleaseormint-allows-cc-immunefi-lombard-git https://solodit.cyfrin.io/issues/lack-of-fee_ratelast_fees-validation-in-handle_bitcoin_pre_sign_request-ebables-rog-immunefi-stacks-git https://solodit.cyfrin.io/issues/the-bitcoincoreclientget_tx_info-does-not-support-coinbase-transactions-which-immunefi-stacks-git https://solodit.cyfrin.io/issues/incorrect-transaction-fee-check-in-sendrawtransaction-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/a-signer-can-request-stacks-tx-nonces-in-batches-in-advance-and-then-dos-other-si-immunefi-stacks-git https://solodit.cyfrin.io/issues/incorrectly-eliminated-code-with-side-effect-in-concat-args-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/signer-can-censor-transactions-and-halt-the-network-by-providing-an-invalid-nonce-o-immunefi-stacks-git https://solodit.cyfrin.io/issues/irnode-multi-evaluation-in-for-list-iter-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/pending-pool-subtraction-overflow-causes-node-haltshutdown-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/a-single-signer-can-abort-every-attempted-signing-round-by-providing-an-invalid-pac-immunefi-stacks-git https://solodit.cyfrin.io/issues/the-coordinator-can-set-a-higher-btc-tx-fee-than-the-current-network-to-make-users-t-immunefi-stacks-git https://solodit.cyfrin.io/issues/erigon-remote-dos-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/the-coordinator-can-submit-empty-btc-transactions-to-drain-btc-tokens-in-the-mu-immunefi-stacks-git https://solodit.cyfrin.io/issues/discrepancy-in-intrinsic-gas-calculation-between-txpool-and-evm-execution-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/malicious-signers-can-initiate-repeated-contract-calls-to-cause-the-multi-sign-wall-immunefi-stacks-git https://solodit.cyfrin.io/issues/signer-can-steal-stx-tokens-in-multi-sign-wallet-by-setting-a-high-stacks-tx-fee-immunefi-stacks-git https://solodit.cyfrin.io/issues/lbtc-cross-chain-transfer-can-be-dosed-immunefi-lombard-git https://solodit.cyfrin.io/issues/old-validated-messages-can-not-pass-proof-check-when-new-validators-are-set-immunefi-lombard-git https://solodit.cyfrin.io/issues/interchanging-offchaintokendata-between-two-valid-messages-immunefi-lombard-git https://solodit.cyfrin.io/issues/attacker-can-exploit-partnervault-mint-small-amount-to-cause-lbtc-depeg-or-protocol-insolvency-immunefi-lombard-git https://solodit.cyfrin.io/issues/nimbus-eth2-gossipsub-misconfiguration-allows-malicious-peers-gossip-malformed-data-without-penalization-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/incorrect-sqrt-calculation-result-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/bitcoinutilsgetdustlimitforoutput-calculate-wrongly-the-dust-limit-for-a-given-bitcoin-script-public-key-immunefi-lombard-git https://solodit.cyfrin.io/issues/potential-dos-to-mempool-due-to-missing-gas-limit-check-immunefi-ethereum-protocol-git https://solodit.cyfrin.io/issues/a-signer-can-send-a-large-number-of-junk-wstsnetmessagenoncerequest-through-p-immunefi-stacks-git https://solodit.cyfrin.io/issues/m-01-creator-exit-redirects-the-treasurys-share-of-the-remaining-vest-and-unswept-fees-shieldify-none-shroomsfun-markdown https://solodit.cyfrin.io/issues/l-01-claimcap-maximum-lets-ordinary-claim-traffic-starve-maximum-sized-tips-until-they-refund-shieldify-none-shroomsfun-markdown https://solodit.cyfrin.io/issues/l-02-full-balance-splitter-payouts-can-strand-revenue-in-a-per-transfer-capped-quote-token-shieldify-none-shroomsfun-markdown https://solodit.cyfrin.io/issues/l-03-bindlaunch-can-become-impossible-stranding-launch-token-revenue-and-blocking-exit-shieldify-none-shroomsfun-markdown