<!-- canonical: https://0xsimao.com/reports/flayer -->

# Flayer audit contest

Sherlock · NFT liquidity · 2nd September 2024 · #13

A public audit contest on Sherlock (NFT liquidity), completed on 2nd September 2024. 0xSimao placed #13. 3 of his findings are published: 2 high severity and 1 medium.

## What Flayer is

Flayer is NFT liquidity infrastructure on Uniswap V4: a collection's NFTs deposit into fungible collection tokens whose markets run as V4 hooks, listings and protected listings sell and collateralise individual pieces, and the Moongate bridge carries collections across chains.

## Scope

The Flayer protocol: collection tokens and their Uniswap V4 hooks, listings and protected listings, and the Moongate bridge integration.

## High severity findings

- [The health of a ```ProtectedListing``` is incorrectly calculated if the ```tokenTaken``` has be changed through ```ProtectedListings::adjustPosition()```.](https://0xsimao.com/findings/flayer-health-through-listings-adjust)
- [Lister is overpaying during the cancel of his listing on ```Listings::cancelListings()```.](https://0xsimao.com/findings/flayer-lister-overpaying-his-listings)

## Medium severity findings

- [In the unlockProtectedListing() function, the interest that was supposed to be distributed to LP holders was instead burned.](https://0xsimao.com/findings/flayer-listing-interest-supposed-burned)

## The contest

[View the contest page](https://audits.sherlock.xyz/contests/468)
