Aegis / Aegis-Contracts
Hacken reviewed Aegis (Aegis-Contracts) on 13 Dec 2024: 17 findings, 0 critical; 15 marked fixed, 2 open.
Report hosted on hacken.io.
Trustblock does not review code.
Findings17
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 1 | 0 | 5 |
| Low | 1 | 0 | 10 |
MediumAny EOA can trigger mint with valid signature and allowanceFixed
The report gives no description here.
MediumProtocol rely on insecure oracle implementationFixed
The report gives no description here.
MediumSignature reply possible within mint and depositIncome functionsFixed
The report gives no description here.
MediumThe _checkMintRedeemLimit bypass is possibleFixed
The report gives no description here.
MediumUsage of IERC20Receiver may lead to reentrancy vulnerabilitiesFixed
The report gives no description here.
LowInconsistent application of SafeERC20 libraryFixed
The report gives no description here.
LowLoss of precision possible within the _calculateRedeemMinCollateralAmountFixed
The report gives no description here.
LowSingleAdminAccessControl does not benefit from AccessControlDefaultAdminRules usageFixed
The report gives no description here.
LowStablecoin does not benefit from blacklisting to comply with AMLFixed
The report gives no description here.
LowThe claimRewards signature check is not EIP-712 compliantFixed
The report gives no description here.
Show 5 more
LowThe depositIncome does not verify oracle priceFixed
The report gives no description here.
LowThe domain separator is being computed every timeFixed
The report gives no description here.
LowThe minReceiveAmount property can be misleadingFixed
The report gives no description here.
LowThe redeemption process can help bypassing the stable coin blacklisting featureFixed
The report gives no description here.
LowThe removeSupportedAsset can remove support for asset in useFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (14)
- AegisRewards.sol
- interfaces/ISingleAdminAccessControl.sol
- AegisOracle.sol
- USDa.sol
- interfaces/IERC20Receiver.sol
- interfaces/IUSDa.sol
- lib/OrderLib.sol
- interfaces/IAegisMinting.sol
- AegisConfig.sol
- interfaces/IAegisOracle.sol
- SingleAdminAccessControl.sol
- interfaces/IAegisRewards.sol
- AegisMinting.sol
- interfaces/IAegisConfig.sol
Part of Aegis’s security record
AegisSecurity firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us