Avantis v1.5: Cross-Asset Leverage audit
Audit competition · firm’s term: private contest
Sherlock reviewed Avantis (Avantis v1.5: Cross-Asset Leverage audit) on 1 Nov 2024: 29 findings, 0 critical; 12 marked fixed, 17 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings29
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 17 | 10 |
| Low | 0 | 0 | 0 |
HighAny referrer can overwrite other traders' referral codes into their own, stealing rebates and decreasing their discountFixed
The report gives no description here.
HighIncorrect collateral value for rebalance if partial trade converts to full tradeFixed
The report gives no description here.
MediumFee distribution will be DOS'd when utilizationRatio >= withdrawThreshold for either trancheFixed
The report gives no description here.
MediumFees is not sent to the operator in case of opening a limit order using the openTrade functionFixed
The report gives no description here.
MediumInconsistency referrerRebate fee allocation between opening and closing orderFixed
The report gives no description here.
MediumIncorrect Spread Percentage Used for PnL-Based Orders in fulfill Function of PriceAggregator ContractFixed
The report gives no description here.
MediumLiquidation might occur instantly after withdrawing max possible marginFixed
The report gives no description here.
Mediumstatus of referral code is always set to private irrespective of the provided boolFixed
The report gives no description here.
MediumThe slippage percent is not updated during updating an open limit orderFixed
The report gives no description here.
MediumUser collateral value may be increased during a Trading.updateMargin( ) call without any USDC transfer in useBackupOnly mode.Fixed
The report gives no description here.
Show 2 more
MediumUser fund loss and incorrect fee calculation during partial trade market close in an edge case scenario.Fixed
The report gives no description here.
MediumWrong skew impact spread will be returned for a trader who is opening the first long position against the already existing short positions for a particular pair.Fixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Avantis’s security record
AvantisSecurity firm
Sherlock38 projects reviewed · 55 reports · latest Sep 2026
See Sherlock’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us