gearbox-contracts

gearbox-contracts copied to clipboard

Audits and disclosures can be found here: https://github.com/Gearbox-protocol/security

apeir99n

abhijitgawai

# Problem In current design, before any operation, creditManager checks allowance needed. To do that, it calls [`_provideCreditAccountAllowance`](https://github.com/Gearbox-protocol/gearbox-contracts/blob/372a8a912629c15843f02b5b82bbf51baabf4bfb/contracts/credit/CreditManager.sol#L862): ``` /// @dev Checks that credit account has enough allowance for operation...

0xmikko

# Problem CreditFilter.sol has a two functions which allow / forbid tokens in allowedTokenList. When DAO forbids token, it set a mapping value for such address to false: ``` ///...

0xmikko

contracts/token/ERC20/utils/SafeERC20.sol

2

https://github.com/Gearbox-protocol/gearbox-contracts/blob/8fcac6f6fd6fdb60661a5e5cec96bd0c81e7fae2/contracts/credit/CreditAccount.sol#L91-L92

Jansistanbul

You can find other known issues here: 1. https://github.com/Gearbox-protocol/core-v2/issues 2. https://github.com/Gearbox-protocol/core-v3/issues 3. https://github.com/Gearbox-protocol/integrations-v3/issues 4. https://github.com/Gearbox-protocol/oracles-v3/issues 5. https://github.com/Gearbox-protocol/gearbox-contracts/issues 6. https://github.com/Gearbox-protocol/integrations-v2/issues 7. https://github.com/Gearbox-protocol/governance/issues

apeir99n