Avantis v1.5: Cross-Asset Leverage audit
Audit competition · firm’s term: private contest
Sherlock reviewed Avantis (Avantis v1.5: Cross-Asset Leverage audit) on 1 Nov 2024: 29 findings, 0 critical; 12 marked fixed, 17 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings29
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 17 | 10 |
| Low | 0 | 0 | 0 |
MediumGuaranteed SL, forced trade durations and pnl fee structure leads to pairs of delta neutral trades that always make moneyAcknowledged
The report gives no description here.
MediumIf a trader of market order or limit order is blacklisted for USDC token, reserved USDC tokens cannot be released foreverAcknowledged
The report gives no description here.
MediumIn the Tranche.sol, there is no slippage check to deposit and withdrawAcknowledged
The report gives no description here.
MediumIncorrect calculations in the Chainlink backup feed price deviation calculation.Acknowledged
The report gives no description here.
MediumIncorrect closing fee calculation occurs because the AccumulatedMarginFee is not deducted from the AdjustedPositionSize, resulting in users paying higher fees.Acknowledged
The report gives no description here.
MediumIncorrect data is passed to the TradingStorage.withinExposureLimit s() function.Acknowledged
The report gives no description here.
MediumIncorrect depositCap check in T ranche contract.Acknowledged
The report gives no description here.
MediumLoss protection inconsistency might result in users taking higher losses than supposed to.Acknowledged
The report gives no description here.
MediumNo slippage protection in the closeTradeMarket() function.Acknowledged
The report gives no description here.
MediumPrecision loss in VaultManager#g etCollateralFee will make users overpay balancingFeeAcknowledged
The report gives no description here.
Show 7 more
MediumPriceAggregator uses the same heartbeat for all the chainlink feedsAcknowledged
The report gives no description here.
MediumStop loss orders cannot be liquidated even if the position is liquidatableAcknowledged
The report gives no description here.
MediumThe closing fee is not factored into the liquidation price calculation.Acknowledged
The report gives no description here.
MediumThe trader might get liquidated when the position is closed due to inconsistent liquidation checkAcknowledged
The report gives no description here.
MediumThe VeTranche.getTotalLockP oints() function results in a loss of precisionAcknowledged
The report gives no description here.
MediumVaultManager accounting is off and will result in significant errorsAcknowledged
The report gives no description here.
MediumWrong handling of wallet open interest will cause issuesAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Avantis’s security record
AvantisSecurity firm
Sherlock38 projects reviewed · 55 reports · latest Sep 2026
See Sherlock’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us