vielite's blog

Glider queries

Approved query covers for now. Description, links, and outcomes can be filled in later.

Broken CEI pattern with token transfers in ERC1155/ERC721 contracts
Broken CEI pattern with token transfers in ERC1155/ERC721 contracts

Finds ERC721/ERC1155 entry points that perform NFT transfers before critical effects are finalized, surfacing CEI violations that can expose unstake, redeem, claim, or withdraw flows to receiver-hook reentrancy and inconsistent state.

ethereum re-entrancy rare
Pyth oracle prices are not validated for freshness
Pyth oracle prices are not validated for freshness

Flags code paths that call standard Pyth oracle functions without checking freshness or validating timestamps.

ethereum oracles rare
Missing slippage parameters in ERC-4626 core functions

Missing slippage parameters in ERC-4626 core functions

ethereum erc4626 rare
Missing slippage parameters for swaps with Curve Finance pools
Missing slippage parameters for swaps with Curve Finance pools

Identifies external entry points that route assets into Curve-style pool operations without exposing caller-controlled slippage bounds, highlighting flows vulnerable to bad execution, MEV, or price movement.

ethereum oracles uncommon
ERC-4626 max* functions don't account for pause/freezing

ERC-4626 max* functions don't account for pause/freezing

ethereum erc4626 rare
Back home