All pull requests

Pull requests

• Fix Dex223OwnableListing.banToken counterpart delisting, tokens[id] cleanup, and updateMe metadata

  #211·Burapa-J opened Nov 10, 2026Contributor·

  ·

• Hand the mainnet factory to the protocol Safe (bounty #37)

  #210·rroland10 opened Nov 8, 2026Collaborator·

  ·

• TokenStandardConverterV2: backing for ERC-223 origins, reentrancy guard, received-balance check (bounty #20, #18, #13)

  #206·rroland10 opened Nov 8, 2026Collaborator·

  ·

• fix(core,periphery): enforce post-swap LENDER_WINDOW in MarginModule, verify factory pools & counterpart claims in Revenue_old, and check transfer return in QuoteLib (rroland10/dex223-bug-bounty#94)

  #189·cyzcz opened Nov 7, 2026·

  ·

• fix(periphery): verify pair tokens & reversed ordering in V3Migrator, re-queue forfeited rewards on RevenueV2.emergency_withdraw, and guard ProtocolFeeCollector (rroland10/dex223-bug-bounty#93)

  #188·cyzcz opened Nov 7, 2026·

  ·

• fix(core,periphery): enforce same-block LENDER_WINDOW & canonical maintenanceMarginBps in MarginModule, support ERC-223 tokenReceived minting in NFPM, and fix Oracle.harmonicMeanLiquidity (rroland10/dex223-bug-bounty#92)

  #187·cyzcz opened Nov 7, 2026·

  ·

• fix(periphery,converter): normalize ERC223Quoter & Descriptor pool lookup/direction and guard TokenConverter tokenReceived/transferFrom (bounty #89)

  #184·cyzcz opened Nov 7, 2026·

  ·

• fix(core,periphery): guard MarginModule counterpart baseAsset & zero-loan, fix Dex223Pool tokenReceived 4-zero-byte/callback lockout, and handle SwapRouter partial-fill ERC-223 refunds (bounty #88)

  #183·cyzcz opened Nov 7, 2026·

  ·

• fix(core,periphery): enforce contract/non-zero checks on tokenReceived, restrict Revenue tokenReceived to staking tokens, and add Autolisting tokenReceived hook (bounty #87)

  #181·cyzcz opened Nov 7, 2026·

  ·
  1

• fix(core,periphery,payments): guard MarginModule orderDepositToken/withdraw223, block self-transfers in Revenue/PaymentReceiver, and resolve ERC-223 pool in PositionValue (bounty #86)

  #180·cyzcz opened Nov 7, 2026·

  ·
  1

• fix(periphery,core,tokens): guard address(0) non-WETH9 lock in NFPM/SwapRouter, normalize Oracle.setMinLiquidity, preserve adjustableSender, and block zero-address transferFrom (bounty #85)

  #179·cyzcz opened Nov 7, 2026·

  ·

• fix(core,periphery,tokens): clear stale freeze on MarginModule rescue, support ERC-223 origin & exactOutput in SwapRouter, verify code in TokenValidator, and guard ownership (bounty #84)

  #178·cyzcz opened Nov 7, 2026·

  ·
  1

• fix(periphery,core): normalize NFPM/LiquidityManagement PoolKey to canonical ERC-20, enforce per-version stake & hybrid guard in RevenueV1, and populate Autolisting pairs (bounty #83)

  #177·cyzcz opened Nov 7, 2026·

  ·
  1

• fix(core,periphery): deduct base-asset liquidation reward in MarginModule, protect custodial WETH9 & self-withdraw in PeripheryPayments, and guard Oracle.getAmountOut (bounty #82)

  #176·cyzcz opened Nov 7, 2026·

  ·
  1

  1

• fix(core,periphery): fix Autolisting.list ETH msg.value deadlock, RevenueV1 cross-standard double-claim & counterpart mapping, and ProtocolFeeCollector/RevenueV2 guards (bounty #81)

  #174·cyzcz opened Nov 7, 2026·

  ·
  1

• fix(converter,periphery,core): guard TokenConverter reentrancy/CEI, bind LiquidityManagement mint callback & NFPM.collect CEI, and block PoolLib self-recipient fee burn (bounty #80)

  #173·cyzcz opened Nov 7, 2026·

  ·
  1

• fix(periphery,converter,libraries): normalize SwapRouter ERC-223 pool keys/origins, protect wrapper reserves in TokenConverter, and guard SqrtPriceMathPartial (bounty #79)

  #172·cyzcz opened Nov 7, 2026·

  ·
  1

• fix(core,periphery): fix MarginModule currencyLimit(0) & cross-standard validation, RevenueV2 withdrawDeposit, and Oracle _isToken0 (bounty #78)

  #171·cyzcz opened Nov 7, 2026·

  ·
  1

• fix(core,periphery): fix listSingle owner ETH & banToken state, RevenueV2 0-supply stream & RevenueV1 gap-claim, and MarginModule guards (rroland10/dex223-bug-bounty#76)

  #170·cyzcz opened Nov 7, 2026·

  ·
  1

  1

• fix(periphery,libraries): harden V3Migrator, NFPM/SwapRouter address(0) ERC-223 delivery, and Oracle/PoolAddress (rroland10/dex223-bug-bounty#75)

  #169·cyzcz opened Nov 7, 2026·

  ·
  1

• fix(security): harden UnsafeMath, SqrtPriceMath, SwapMath, Tick, TickBitmap, FullMath08, and TransferHelper (rroland10/dex223-bug-bounty#74)

  #168·cyzcz opened Nov 7, 2026·

  ·

• fix(security): harden PeripheryPaymentsWithFee, LiquidityManagement, Position, and PoolDeployer (rroland10/dex223-bug-bounty#73)

  #167·cyzcz opened Nov 7, 2026·

  ·

• fix(core,periphery): guard 0-amount swap callback bypass, burn/collect swap_sender, and executeSwapWithDeposit (bounty #69)

  #166·cyzcz opened Nov 6, 2026·

  ·

• fix(libraries): guard SafeERC20Limited overflow, Multicall revert bubbling, Path/BytesLib bounds, and FixedPoint/HexStrings (bounty #68)

  #165·cyzcz opened Nov 6, 2026·

  ·

• fix(introspection,periphery,libraries): guard ERC165Checker decode, TokenStandardIntrospection overflow/withdraw, and NFTDescriptor/NFTSVG (bounty #67)

  #164·cyzcz opened Nov 6, 2026·

  ·
  1