Skip to content

code-423n4/loopfi-bug-bounty

View on GitHub ↗Related repositories →

active 2024-06-212025-04-17 (UTC)

Partial coverage22,803 / 26,311 hourly files (87%) · 2 absent upstream · 3,507 failed, retryable2023-08-152026-08-15 (UTC)— sampled evenly across the window, so rankings and trends hold; absolute counts scale up.
Events
107
Pushes
3
Pull requests
1
Issues
90
Stars
7
Forks
2

Activity over time

Daily event counts in the loaded window

Line chart, 301 days from 2024-06-21 to 2025-04-17. Pushes: 3 total, peak 1 in a day. Pull requests: 1 total, peak 1 in a day. Issues: 90 total, peak 69 in a day. Comments: 3 total, peak 1 in a day. Stars: 7 total, peak 1 in a day.

  • Pushes
  • Pull requests
  • Issues
  • Comments
  • Stars

Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.

Top contributors

Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity

ContributorContributionsPushesPRsComments
c4-bot-318000
c4-bot-417000
c4-bot-816000
c4-bot-915000
c4-bot-613000
c4-bot-106000
c4-bot-53000
CloudEllie2110
c4-bot-71000
c4-bot-11000
crypt0nX1001
moeid31001
itsmetechjay1100
sentinelxyz1100
neogranicen1001

Recent activity

Latest issues, pull requests and releases

  • Issue#187c4-bot-92025-04-17 11:48
    Balance Injection in _fillQuote Allows Overminting of lpETH
  • Issue#186c4-bot-42025-04-17 11:48
    Ownership transfer can be blocked or misused due to missing checks in acceptOwnership
  • Issue#185c4-bot-92025-04-17 11:48
    Potential Off-chain Referral Abuse through _referral Field
  • Issue#184c4-bot-42025-04-17 11:48
    Missing Validation of typeIndex in claimAndStake May Cause Vault Misbehavior
  • Issue#183c4-bot-42025-04-17 11:48
    Critical Slippage Protection Vulnerability
  • Issue#182c4-bot-102025-04-17 11:45
    Reentrancy in _processLock Function Impacting Contract Integrity and Fund Safety
  • Issue#181c4-bot-82025-04-17 11:45
    Reentrancy in `_fillQuote` Function Impacting Token Swaps and Contract Integrity
  • Issue#180c4-bot-102025-04-17 11:45
    Ignored Return Value in `_claim` Function for `WETH.approve` Call
  • Issue#179c4-bot-102025-04-17 11:45
    Withdrawing funds out of contract via claim() using an "ABI-smuggling"-type attack
  • Issue#177c4-bot-32025-04-17 11:45
    Unchecked External Call for FillQuote Function
  • Issue#176c4-bot-62025-04-17 11:45
    Lack of Input Validation in Core Functions
  • Issue#175c4-bot-32025-04-17 11:45
    Emergency Mode Exploitation
  • Issue#174c4-bot-92025-04-17 11:45
    Arithmetic underflow/overflow
  • Issue#173c4-bot-32025-04-17 11:45
    Potential Centralization
  • Issue#171c4-bot-92025-04-17 11:45
    Ownership Transfer Problems:
  • Issue#170c4-bot-42025-04-17 11:44
    Ownership Transfer Problems
  • Issue#169c4-bot-92025-04-17 11:44
    Front-Running: Risks
  • Issue#168c4-bot-42025-04-17 11:44
    Malicious 0x Protocol Call Data Crafting by Users to Steal Funds on Claim
  • Issue#167c4-bot-92025-04-17 11:44
    Wrong Percentage Validation in `_claim` Function
  • Issue#166c4-bot-42025-04-17 11:44
    Improper Handling of Non-Standard ERC20 Tokens
  • Issue#165c4-bot-32025-04-17 11:44
    Integer Division Vulnerability prevent users from claiming small percentages
  • Issue#164c4-bot-32025-04-17 11:44
    Unchecked Swap Input Validation Enables Arbitrary Token Redirection in `_fillQuote`
  • Issue#163c4-bot-32025-04-17 11:44
    INCORRECT ACCESS CONTROL
  • Issue#162c4-bot-62025-04-17 11:44
    INCORRECT ACCESS CONTROL
  • Issue#161c4-bot-32025-04-17 11:44
    Insecure Use of delegatecall with Arbitrary Address in Address.sol

Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 7 stars here means stars gained during the window, not the repo's star count.