sBOLD

ChainSecurityFiles named in the report

Audit

ChainSecurity reviewed K3 Capital (sBOLD) on 19 May 2025: 23 findings, 2 critical; all marked fixed.

2 critical findings, fixed
Open the reportOpen K3 Capital’s security record

Report hosted on chainsecurity.com.

Trustblock does not review code.

Findings23

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical002
High004
Medium007
Low0010
CriticalReentrancies From Swap()Fixed

The report gives no description here.

Criticalswap() Calls Incorrect Function in SP to Receive CollateralFixed

The report gives no description here.

HighamountProRata Withdrawn From SP Is Too HighFixed

The report gives no description here.

HighCollateral Value Is Not Accounted Below maxCollInBold ThresholdFixed

The report gives no description here.

HighIncorrect Quote CalculationFixed

The report gives no description here.

HighStashed Collateral Not Taken Into AccountFixed

The report gives no description here.

MediumBOLD Yield Is Never RedepositedFixed

The report gives no description here.

MediumEarly Return in withdrawFromSPFixed

The report gives no description here.

MediumInconsistent Fee CalculationFixed

The report gives no description here.

MediumPartial Swaps Are Not AllowedFixed

The report gives no description here.

Show 10 more
MediumprovideToSP() Can Be Called With Zero AmountFixed

The report gives no description here.

MediumtotalAssets() Is Not OverriddenFixed

The report gives no description here.

MediumUndiscounted Collateral Used in _maxCollInBoldFixed

The report gives no description here.

LowDead Shares Can Be InvestedFixed

The report gives no description here.

LowERC4626 Function maxDeposit Should Reflect PausabilityFixed

The report gives no description here.

LowInconsistent Decimal AdjustmentsFixed

The report gives no description here.

LowIncorrect RoundingFixed

The report gives no description here.

LowIncorrect Transient Storage SlotFixed

The report gives no description here.

LowmaxDeposit() Should Never RevertFixed

The report gives no description here.

LowNo Rebalancing Between Stability PoolsNoteVersion 1Code Corrected CS-SBOLD-027 The weights configured in sBold constructor are expected to define the capital allocation between the different pools, buFixed

The report gives no description here.

Show 3 more
LowRounding in withdrawFromSPFixed

The report gives no description here.

Lowswap() Reverts if rewardBps Is Set to 100%Fixed

The report gives no description here.

LowUnable to Swap a Single CollateralFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (18)

  • base/BaseSBold.sol
  • libraries/logic/SwapLogic.sol
  • libraries/logic/SpLogic.sol
  • interfaces/ICommon.sol
  • interfaces/ISBold.sol
  • libraries/helpers/Constants.sol
  • oracle/chainlink/ChainlinkLstOracle.sol
  • libraries/helpers/TransientStorage.sol
  • libraries/helpers/Decimals.sol
  • interfaces/IRegistry.sol
  • libraries/Common.sol
  • interfaces/IPriceOracle.sol
  • libraries/logic/QuoteLogic.sol
  • oracle/pyth/PythOracle.sol
  • sBold.sol
  • oracle/chainlink/BaseChainlinkOracle.sol
  • oracle/Registry.sol
  • oracle/chainlink/ChainlinkOracle.sol

Part of K3 Capital’s security record

K3 Capital
Audits1 audit by 1 firmLast audit May 2025, by ChainSecurity.
Critical findingsNo open critical findingsIn that report, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open K3 Capital’s security record

Security firm

ChainSecurity

81 projects reviewed · 286 reports · latest Sep 2026

See ChainSecurity’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us